how to make SQL server more secure

hmmm... here are some tips. 1. make sure the server is not configured to the default port 1433 2. restrict the access to extended sps to normal users 3. make sure you have an anti virus installed on the server 4. make sure to install windows updates on time 5. restrict access to the folders in which the data and log files stored. These are the ones i can remember at this time... may be more in the next reply... good luck cheers

Disallow some function to be able for users.. Only you as administrator can do all functions and commands.... Users should have only basic function what is needed for using databases...Create table, drop, insert, select... and of course you should allow connecting to sql server only from local...