Script to Secure the Session State Database using SQL Authentication
USE App_SessionState;
DECLARE @dbOwner varchar(100);
DECLARE @dbUser varchar(100);
DECLARE @dbUserPass varchar(100);
-- Configure Script Here!
SET @dbOwner = 'sa';
SET @dbUser = 'AppSessionUser';
SET @dbUserPass = 'Password1234';
-- Ensure that the database owner is an appropriate admin account
EXEC sp_changedbowner @loginame=@dbOwner;
-- Create the new application account
EXEC sp_addlogin @loginame=@dbUser
-- Set the default database for the new account
EXEC sp_defaultdb @loginame=@dbUser, @defdb='App_SessionState';
-- Grant access to the Session State database to the dbUser account
EXEC sp_grantdbaccess @loginame=@dbUser;
-- Create a new Role for stored procedure execution
-- Note: This only works in SQL Server 2005
CREATE ROLE db_executor
GRANT EXECUTE TO db_executor
-- Assign read, write, and execute permissions to the dbUser account
EXEC sp_addrolemember @rolename='db_datareader', @membername=@dbUser;
EXEC sp_addrolemember @rolename='db_datawriter', @membername=@dbUser;
EXEC sp_addrolemember @rolename='db_executor', @membername=@dbUser;