How to prevent misuse of rights in monitoring application? I have a monitoring application that runs on the computer of each user in my organization. This application needs to insert some monitoring data in several tables of a database (MS SQL Server 2008 R2). We are using Windows authentication.

If I give INSERT rights or grant access to execute a stored procedure, how will I make sure that the users cannot misuse these rights and say for example, add a lot of unwanted data in the tables?
Easiest is to not grant the table at all, not to end users. Create a stored procedure that does the dml and grant the procedure to the monitoring users, not to the regular users. That way no misuse is possible.