Security Notes

To specify a secure SAS/SHARE server, submit code similar to the following code on your Windows system:

/* Start a remote secured SAS/SHARE server that requires user login  */
/* name and password specified by the client.                        */
/* ADOMAIN is the domain that authenticates username and password    */   
%let tcpsec=_secure_;             /* Require user logon id/password  */
options authserver=adomain;
proc server id=shr1 authenticate=req;
run;

For this code to work on Windows 2000 or Windows NT you must assign Act as part of the operating system to the user account that is running the SAS/SHARE server. This privilege is not needed for later versions of Windows such as Windows XP and Windows Server 2003. You must assign Log as a batch job rights to the user account that wants to connect to the SAS/SHARE server.

For example, suppose your Windows system is named TRISTAN, and the user account adomain\stephmc wants to connect to the SAS/SHARE server. Also, suppose the user logged in to TRISTAN (and running the SAS/SHARE server) is the user account adomain\joshua. On the system named TRISTAN, you must assign user rights. To do this, use the group policy.

Complete the following steps:

Select StartRun, type gpedit.msc, and then click OK.
Select Windows Settings under Computer Configuration. Select Security SettingsLocal PoliciesUser Rights Assignment.
Right-click Act as part of the operating system, and then select Properties. Click Add User or Group, type adomain\joshua, and then click OK.
Right-click Log on as a batch job, and then select Properties. Select Add User or Group, type adomain\stephmc, and then click OK.

After the system TRISTAN is shut down and restarted (rebooting is usually required), you submit the preceding code on TRISTAN.

To log on to the remote Windows system, the user account adomain\stephmc specifies the user name adomain\stephmc in the SAS ODBC Driver Configuration dialog box and the password in the SAS/SHARE Options dialog box. The user specifies an address such as tristan.mynet.com. This action enables the user account adomain\stephmc to connect to the secure SAS/SHARE server.

For more information, see SAS/SHARE User's Guide.