0

Our warehouse site desperately requires a database that runs efficiently, is secure and we can modify ourselves. Unfortunately the Company's policy does not allow any servers on site, only at headquarters. We are allowed to create MS Access databases and modify them, but if we wish them to be run on a SQL server, it has to be supported by IT and we lose access to make any modifications. Access runs like a snail over the network as headquarters is in another state. Even a small file with a simple structure can freeze up or take minutes to open a form.

My question is, is there a solution for our situation? Is it possible to get around all the red tape? How can I argue that they aren't providing what we need and get them to listen?

Jon Muffn
  • 1
  • 3
    I don't think this is really a security question. It may be better suited on the Serverfault site. – Steve Jul 08 '12 at 06:48
  • I guess my line of thought was because they always say no because of security concerns, what is a solution that is secure enough for their trust and also suits our needs? – Jon Muffn Jul 08 '12 at 14:24

2 Answers2

3

Before trying to convince them that their policy is restricting your requirements, first find out why they have this policy in place.

I have worked with companies in the past with similar requirements, and it can be a pain, but when you consider the risks of a locally hosted SQL server (backup requirements, licensing requirements, risk of an insecure and untested front end, patching and maintenance issues) it makes more sense to have them hosted in a central location with dedicated personnel.

I know this maybe isn't the answer that you are looking for, but it is much easier to work with a company policy when you understand the reason for it existing.

xpn-security
  • 384
  • 1
  • 5
  • you're right abt finding out why they put such restrictions in place.. – fduff Jul 08 '12 at 20:55
  • The reason for not allowing a server onsite is because IT would have no control over the security and it may expose the network to unwanted vulnerabilities. The reason for not allowing a server at headquarters that we can access ourselves is because of the risk to other databases. – Jon Muffn Jul 09 '12 at 09:25
  • @JonMuffn - If you need access to more then a simple access database, go through your companies process, to get your own sql database. You have no other choice, since by policy, your limited in what you can do. – Ramhound Jul 09 '12 at 11:31
1

You have multiple options here:

  • Opt to increase the bandwidth of your uplink
  • Change the company policy or ask for an exception

All of the above will require a case study that shows that you are working ineffectively because of this bottleneck. Present this to your management, they should look into it.

Lucas Kauffman
  • 54,437
  • 17
  • 116
  • 196