Enable Network Access to SQL Express

Once you have SQL Express set up on your local computer, you can allow remote connections for members of your network. There are different ways to do this and these steps may not work for your existing network environment or authentication methods. Below is a simple approproach for SQL Server Express Edition that is set up on a local computer and SQL Server authentication is used for members of the same network to remotely connect.

Security & Connections

  1. Open SQL Server Management Studio (SSMS)
  2. Connect to your server and right click your server and click Properties.
  3. Go to the Security page and for Server Authentication, select SQL Server and Windows Authentication mode.
    SSMS server properties - Security
  4. Then, go to the Connections page and ensure that "Allow remote connections to this server" is checked and click OK.
    SSMS server properties - Connections

SQL Server Authentication

Now that we've ensured your server is set to allow remote connections, you can set up a login for the server and the specific Calibration Control database (apecal). The following steps will explain how to create a universal SQL Server Authentication login for all Calibration Control users. (You can create individual logins using SQL Server Authentication or Windows Authentication if that works best for your work environment.)

  1. First, expand the Security folder under your server
  2. Then, right click the Logins folder and select New Login...
  3. Type in a generic user name that all users will use, such as apeuser.
  4. Select SQL Server Authentication.
  5. Enter a strong password. It is entirely up to you if you want to keep "Enforce password policy" checked, however deselecting it will deselect the other checkboxes below it.
  6. Select your apecal database as the default database.
    SSMS Create server login
  7. Next, under the Server Roles, public will automatically be selected and cannot be deselected. You can optionally select additional roles to grant to this user.
  8. Then, open User Mapping and check the apecal database
  9. Under the database roles, select db_datawriter and db_datareader
  10. Next, expand the Databases folder by double clicking it or clicking the plus sign.
  11. Expand your apecal database and then its Security folder
  12. Expand the Users folder and double click the login you just created.
  13. Click the Membership page and double check that the user has the minimum required roles (at least db_datareader and db_datawriter). Click OK.
    SSMS User Mapping

SQL Server Configuration

Your server is set up to allow remote connections with a SQL Server login but now you must enable TCP/IP protocols for your server.

  1. Open SQL Server Configuration Manager
  2. Expand SQL Server Network Configuration and Protocols for {Your server name}.
  3. Right click TCP/IP and click Enable, then click OK. You'll see a message that the service needs to be restarted before changes take effect.
    SQL Server Configuration Enable TCP/IP
  4. Open the SQL Server Services and right click your server and Restart. Alternatively, you can restart your server in SSMS by right licking the server name and clicking Restart.
    SQL Server Configuration Restart

Windows Firewall Configuration

TCP/IP is now enabled on your server. The next step requires allowing specific ports to connect to your server.

  1. Open Windows Defender Firewall with Advanced Security
  2. Click on Inbound rules
  3. Then, select New Rule... located on the right under the Actions menu.
  4. Select Port and click Next.
    SQL Server Configuration Restart
  5. Select TCP and for Specific local ports, enter 1433. For more information, Microsoft lists other ports used by SQL Server here: https://docs.microsoft.com/en-us/sql/sql-server/install/configure-the-windows-firewall-to-allow-sql-server-access?view=sql-server-ver15#ports-used-by-
    Inbound Rule Port
  6. Continue clicking Next all the way through and specify a name for your rule and Finish.
  7. Next, create a new inbound rule.
  8. Select Custom to create a custom rule and click Next.
    Inbound Rule Custom
  9. Under the Services section, click the Customize... button.
    Inbound Custom Service SQL Server
  10. Select Apply to this service and scroll through to select your SQL Server and click OK.
    Inbound Custom Service SQL Server
  11. Continue clicking Next all the way through and specify a name for your rule and Finish.

Test the connection

If the SQL Server is hosted on your local computer, the server name is the computer's IP address followed by a comma and the port number from the earlier step. (Example:, 1433)

On another user's computer, test the connection to your server by simply using Calibration Control and entering the required SQL Server connection information. If the connection is not successful, try using a UDL file to troubleshoot the connection.

Last Updated: 27 July 2020