SQL Server trusted connection additional security Using Windows authentication, is there a way to prohibit users from connecting via ODBC to the database?
The feature designed to help in this scenario is Application Roles.  With an Application Role you can allow the user to connect to the target database, but not be able to run any queries until the application supplies a secret to activate the Application Role.