Sql Server Integrated Security Without MSSQL Management Studio
===

I am using Integrated Security in an ASP.net application, the IIS and SQL are both hosted on the same server running Windows Server 2008 R2.

Is it possible to allow users to access the Application from across the network AND logged in users but not let them access the database directly or via MSSQL Management Studio?

I am trying to safeguard the database access because my application is going to be deployed on the Client's server at Client's premises.

Any Suggestions?