Any Security Concerns , Measures for using dtc within our code

Old forum URL: forums.lhotka.net/forums/t/1718.aspx

dstarkey posted on Wednesday, November 08, 2006

Hello all,

My boss is a little concerned about the security vulnerablilities of Microsofts DTC service. Has anyone run into any potential problems using this with the .net transaction scope directive?? Any insight is greatly appreciated.

Thanks

Don

RockfordLhotka replied on Wednesday, November 08, 2006

Certainly the System.Transactions technology does use the DTC in certain cases. When it does that, it becomes essentially the same as using Enterprise Services for transaction management.

To avoid triggering the DTC, you need to open one, and only one, connection to a SQL 2005 database within the context of your transaction. Then lightweight transactions will be used that don't use the DTC.