﻿<?xml version='1.0' encoding='UTF-8'?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/"><channel><title>SQLServerCentral / SQL Server 2005 / SQL Server 2005 Security </title><generator>InstantForum.NET v2.9.0</generator><description>SQLServerCentral</description><link>http://www.sqlservercentral.com/Forums/</link><webMaster>notifications@sqlservercentral.com</webMaster><lastBuildDate>Sat, 25 May 2013 13:58:09 GMT</lastBuildDate><ttl>20</ttl><item><title>Encrypt the whole database</title><link>http://www.sqlservercentral.com/Forums/Topic906716-359-1.aspx</link><description>Hi Techies,   I have requirement to encrypt the whole database ( all data in all tables )so that if anybody get the database backup, they cannot get the data at any cost until they have the decrypt key or wat ever.Is there any possibility to have like this Security implementation.please provide your thoughts and suggestionsThanks &amp; Regards  Ganesh</description><pubDate>Tue, 20 Apr 2010 05:12:40 GMT</pubDate><dc:creator>SQL Dev-938873</dc:creator></item><item><title>How do I remove a table where TABLE_SCHEMA IS NULL</title><link>http://www.sqlservercentral.com/Forums/Topic861840-359-1.aspx</link><description>I have an application that creates and removes tables as part of its process.  For some reason it doesn't always remove the tables it creates.Running on SQL Server 2000 this does not create an issue, however I have upgraded to SQL 2005.When I attempt to view the tables in Management Studio I receive an error "Value cannot be NULL" and no tables are displayed.The following code displays the culprit:SELECT TABLE_SCHEMA,TABLE_NAME, OBJECTPROPERTY(object_id(TABLE_NAME), N'IsUserTable') AS type  FROM INFORMATION_SCHEMA.TABLESWHERE TABLE_SCHEMA IS NULLTABLE_SCHEMA    TABLE_NAME     type--------------- -------------  ------NULL            GRSA0000002H5  NULLHow can I remove this table with a Table_Schema of NULL?I've tired:ALTER SCHEMA dbo TRANSFER NULL.GRSA0000002H5UPDATE INFORMATION_SCHEMA.TABLES SET TABLE_SCHEMA = 'dbo' WHERE TABLE_SCHEMA IS NULLas well as some code I found using 'sp_changeobjectowner'.The response I get is either it doesnt exist or I dont have permissions.</description><pubDate>Mon, 08 Feb 2010 10:05:49 GMT</pubDate><dc:creator>relentless99</dc:creator></item><item><title>SQL Orphaned users</title><link>http://www.sqlservercentral.com/Forums/Topic1451433-359-1.aspx</link><description>Hifirstly thanks for looking at this post.....I am trying to implement a solution to fix our current security dilemma….i have created some security groups in AD where users are added/removed  so they can gain access to SQL servers eg...(G.SqlReadOnly.Servername) this works fine until I either refresh a Database from a live server to its test counterpart  or create a new one on said server.  I have to then go in manually to map the group to the new/refreshed DB.  i have half a dozen other groups so this can get quite tiresome...Is there an easy way I can do this? Thanks Pete</description><pubDate>Fri, 10 May 2013 01:11:01 GMT</pubDate><dc:creator>pskoasha</dc:creator></item><item><title>Alter schema statement - Incorrect syntax near '\'.</title><link>http://www.sqlservercentral.com/Forums/Topic1450339-359-1.aspx</link><description>I am trying to use the alter schema statement on a table with this name:ABC\genn.smith.itemresultswith this statementALTER SCHEMA dbo TRANSFER ABC\genn.smith.itemresultsand I get this error:Incorrect syntax near '\'.What does that mean? How can I change the schema to dbo lif the schema is ABC\genn.smit?Thank you.</description><pubDate>Tue, 07 May 2013 15:12:46 GMT</pubDate><dc:creator>Kbear</dc:creator></item><item><title>How do I limit user access to certain time of day</title><link>http://www.sqlservercentral.com/Forums/Topic540295-359-1.aspx</link><description>We have a group of queries that we want to limit to run off peak hours to stop from bogging down production.These queries pull data from our prod server and store the results on a reporting server.We don't want the developers to run the queries during prime timeOur test server is an extremely small subset of the production data so to get a real idea of how long a query will run it needs to be run against prod - but off hours.Is there any way to limit user access to the server to only certain times of day?I was thinking that one way would be to limit their access to views that had code in it to check the time of day and return an error if during prime time, but that would have to be added to every view.</description><pubDate>Thu, 24 Jul 2008 09:38:01 GMT</pubDate><dc:creator>Craig A. Silvis</dc:creator></item><item><title>The EXECUTE permission was denied on the object 'xp_sqlagent_enum_jobs', database 'mssqlsystemresource', schema 'sys'.</title><link>http://www.sqlservercentral.com/Forums/Topic792839-359-1.aspx</link><description>[b]Problem Statement[/b]:I have some users that are not a part of any server role (except the default public).  For each of the user databases their permissions are tuned to deal only with user objects (tables, procedures, views, etc - standard read, write, execute, etc).  We have no issue with their permissions as far as it relates to any of the user databases.  However they also need the ability to administer SQL Agent jobs so I added them as users (USE [msdb]; CREATE USER &amp;lt;login&amp;gt; FOR LOGIN &amp;lt;login&amp;gt;;) and then added them to the SQLAgentOperatorRole.Now when these users attempt to expand the SQL Server Agent --&amp;gt; Jobs node in SSMS, they receive the error [color="red"]The EXECUTE permission was denied on the object 'xp_sqlagent_enum_jobs', database 'mssqlsystemresource', schema 'sys'.[/color].I have Googled and Binged and found two possible solutions - (a) follow the KB article http://support.microsoft.com/kb/2000274 and (b) add the users to the master database.This raises two situations for me.  First, I do not fully follow the KB article since not all the instances this problem exists are due to restored databases.  Second, I do not like the idea of giving my users access to the master database.  I did do a test and added the users to the master database and gave them db_owner permissions.  After doing this, the error went away.My question is, does anyone else have experience with this error and what solution do you prefer (one of the above or even a different one).</description><pubDate>Wed, 23 Sep 2009 11:46:23 GMT</pubDate><dc:creator>Tony Fountain</dc:creator></item><item><title>trigger security</title><link>http://www.sqlservercentral.com/Forums/Topic1448106-359-1.aspx</link><description>I have a group of users with ddl_admin previalges on databases which i want to continue but how can i preven them from making changes to a particualr trigger on that database?</description><pubDate>Tue, 30 Apr 2013 09:20:50 GMT</pubDate><dc:creator>Tara-1044200</dc:creator></item><item><title>PCI Compliance</title><link>http://www.sqlservercentral.com/Forums/Topic1444374-359-1.aspx</link><description>Hello,We have a database which needs to be secure in order for PCI compliance. What I am trying to establish is if there is a way of logging USERNAME and EXECUTION TIME each time DECRYPT_BY_CERT is run in SQL Server 2005.Any advice would be most appreciated.Andrew</description><pubDate>Fri, 19 Apr 2013 07:09:46 GMT</pubDate><dc:creator>Andrew Pruski</dc:creator></item><item><title>disable remote access</title><link>http://www.sqlservercentral.com/Forums/Topic1330807-359-1.aspx</link><description>I am trying to disable remote access for a SQL instanceHere is what I did in SSMS,Right click server instance-&amp;gt; click properties -&amp;gt; connections (server properties)-&amp;gt; unchecked "Allow remote connections to this server"Then I restarted sql serviceBut still I am able to connect from my local machineDo I miss something?</description><pubDate>Tue, 17 Jul 2012 08:53:32 GMT</pubDate><dc:creator>Daxesh Patel</dc:creator></item><item><title>Domain users not in sys.server_principles</title><link>http://www.sqlservercentral.com/Forums/Topic1441511-359-1.aspx</link><description>Hello. I'm trying to find out who owns SQL Agent jobs on one of our servers where there's a lot of jobs.[code]SELECT sj.name AS 'job', sp.NAME AS 'owner', spr.NAME AS 'proxy', sj.* FROM msdb..sysjobs sjLEFT JOIN sys.server_principals sp ON sj.owner_sid=sp.sidLEFT JOIN msdb..sysjobsteps sjt ON sj.job_id = sjt.job_idLEFT JOIN msdb..sysproxies spr ON spr.proxy_id=sjt.proxy_idWHERE sj.enabled=1[/code]A lot of these come back with NULL as the owner; most likely because that user has their access thru a domain group rather than having their individual login defined on the server. If you look at 1 of the jobs with no owner in the GUI it will display. And there is a valid looking owner_sid in sysjobs for these entries.So how is the GUI getting it right? :ermm: Is it some kind of Active Directory query or maybe sys.server_principles isn't the right table to query.Thanks,Ken</description><pubDate>Thu, 11 Apr 2013 16:13:18 GMT</pubDate><dc:creator>ken.trock</dc:creator></item><item><title>trusted domains where domain login with sql access is disabled on the domain</title><link>http://www.sqlservercentral.com/Forums/Topic1440529-359-1.aspx</link><description>Can you picture a domain login in one domain "mapping over" into a trusted domain and working for sql access even though the sql access is for the other domain where that user's network login is disabled.  e.g.  Domain1\JoeBloe is enabled in Domain 1 but has no explicit sql access and none via groups I can find.    Domain2\JoeBloe is disabled in Domain2 but has sql access.   Domain1\JoeBloe can connect to sqlSql server is actually in Domain3</description><pubDate>Tue, 09 Apr 2013 13:32:55 GMT</pubDate><dc:creator>Indianrock</dc:creator></item><item><title>Best way to audit objects in SQL 2005</title><link>http://www.sqlservercentral.com/Forums/Topic1439391-359-1.aspx</link><description>I have a server running SQL Server 2005 Standard and I have been asked to audit server/database object events (create, alter and delete).  What the best way to accomplish this with the least amount of overhead in performance?RegardsMG</description><pubDate>Fri, 05 Apr 2013 11:50:28 GMT</pubDate><dc:creator>M Garcia</dc:creator></item><item><title>Error logging in...The type initializer for 'System.Data.SqlClient.SqlConnection' threw an exception</title><link>http://www.sqlservercentral.com/Forums/Topic1366799-359-1.aspx</link><description>Hello - I have a SQL Server instance that I am only able to get to from my local installation of SQL 2005, but from any other method I attempt to access the instance (i.e. RDP session over to the server, APEX SQL, etc...) I am getting the following error.  Here is the main error message, and a snapshot of the error scrren.[b]The type initializer for 'System.Data.SqlClient.SqlConnection' threw an exception[/b][img]http://i1109.photobucket.com/albums/h437/RWYarger/sql_Authentication_error.jpg[/img]It's not an incorrect password or user ID as I am able to get logged in just fine through the SQL Server Authentication in my local copy of the instance, but from any other means - this is what I get.Any advice or help would be appreciated.  I have check the Server Configuration (all but VIA protocols are enabled for the instance) as well as the Surface Area Configuration (which shows to use both TCP/IP and Named Pipes for both local and remote connections to the box).Thank you,SQL_ME_RICH</description><pubDate>Mon, 01 Oct 2012 15:43:05 GMT</pubDate><dc:creator>SQL_ME_RICH</dc:creator></item><item><title>while attaching db error occur</title><link>http://www.sqlservercentral.com/Forums/Topic1438065-359-1.aspx</link><description>Unable to open the physical file "E:\pubs.mdf". Operating system error 5: "5(Access is denied.)". (Microsoft SQL Server, Error: 5120)For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft%20SQL%20Server&amp;ProdVer=11.00.3000&amp;EvtSrc=MSSQLServer&amp;EvtID=5120&amp;LinkId=20476</description><pubDate>Tue, 02 Apr 2013 13:08:20 GMT</pubDate><dc:creator>raja.2012.raja</dc:creator></item><item><title>locking table</title><link>http://www.sqlservercentral.com/Forums/Topic783311-359-1.aspx</link><description>Hi,I have a table - how to lock my  table not to INSERT/UPDATE/DELETE plz answer me...regards,kannak.....</description><pubDate>Sat, 05 Sep 2009 05:19:50 GMT</pubDate><dc:creator>sekannak</dc:creator></item><item><title>Windows AD Groups Question</title><link>http://www.sqlservercentral.com/Forums/Topic1434968-359-1.aspx</link><description>We want to introduce Integrated Security and use Windows Groups to simplify some things in our SQL Server access.  I believe I understand how this works, but I want to verify that the following scenario will work in the way that I understand it:GroupA will be assigned to the  db_datareader  role in a given database.GroupB will be assigned both db_datareader and db_datawriter role in the same database.A couple of users will be part of both groups because the groups are used for file access as well that is unrelated to sql server.  I want to verify that the users who are members of both groups will still be able to make changes to the data.  As I understand it, they should as long as no DENY command has been used on GroupA which would prevent making changes to the data.Thanks,</description><pubDate>Mon, 25 Mar 2013 09:12:37 GMT</pubDate><dc:creator>Del Lee</dc:creator></item><item><title>use of guest account</title><link>http://www.sqlservercentral.com/Forums/Topic1434661-359-1.aspx</link><description>Hi All, What is the Guest account in SQL Server 2K,2k5 and above? What is the use of this account? Do we really need this account? When does sql uses this account ? What if we disable account ? What will if i disable it ? Can anyone give brief and precise explaination. Thank you in Advance.</description><pubDate>Sat, 23 Mar 2013 22:00:17 GMT</pubDate><dc:creator>Oracle_91</dc:creator></item><item><title>How do i grant permission to msdb.dbo.sp_send_dbmail ?</title><link>http://www.sqlservercentral.com/Forums/Topic686387-359-1.aspx</link><description>I have my custom sp in my testDB database which is using dbo.sp_send_dbmail system sp from msdb. I have many users to use my custom stored procedure. But i cannot give permissions to all the users. Instead i created one login 'Admin_User' which has the following permissions granted:1. Added user 'Admin_User' to msdb database with role 'DatabaseMailUserRole'.2. Default security profile 'TEST_EMAIL' is added to user 'Admin_User'Now i have a user with name 'test' in testDB database have to access my custom sp to send email.  but this user doesn't have any permission in msdb database, since this user is not in msdb database.So, when i execute the sp, i am getting following error:[b]Msg 229, Level 14, State 5, Procedure sp_send_dbmail, Line 1EXECUTE permission denied on object 'sp_send_dbmail', database 'msdb', schema 'dbo'.[/b]Sometimes, i used to get this error as well:[b]Msg 15517, Level 16, State 1, Procedure sp_send_email, Line 17Cannot execute as the database principal because the principal "Admin_User" does not exist, this type of principal cannot be impersonated, or you do not have permission.[/b]I have checked this, but didnt get any answer from this article: http://msdn.microsoft.com/en-us/library/ms188304.aspxso, how do i impersonate 'Admin_User' on msdb so that i can execute my custom sp to send email through 'test' user. I cant give any permission to test user in msdb. (Because there will be lot of users like this)I tried to get the user_name who is executing the sp using SELECT user_name(). it returned the user name 'Admin_User'.Please help me on this. Thanks in Advance.[b]CODE:CREATE PROCEDURE [dbo].[sp_email](      @recipients VARCHAR(MAX),      @subject VARCHAR(MAX),      @body VARCHAR(MAX))WITH EXECUTE AS 'Admin_User'AS BEGIN	IF (@body IS NOT NULL AND @subject IS NOT NULL AND @recipients IS NOT NULL)	begin		EXEC msdb.dbo.sp_send_dbmail             @profile_name = 'TEST_PROFILE',             @recipients = @recipients,             @subject = @subject,             @body = @body,             @body_format = 'TEXT';	endEND[/b]</description><pubDate>Mon, 30 Mar 2009 12:42:03 GMT</pubDate><dc:creator>justnagendra82</dc:creator></item><item><title>How to simulate the trace of some events</title><link>http://www.sqlservercentral.com/Forums/Topic1430525-359-1.aspx</link><description>Hi,I activated the trace events.What test queries can I do to get trace of the following Security Audit events ?Audit Database Object Take Ownership Audit Server Object GDR Audit Server Object Management Audit Server Object Take Ownership:-) Thanks to anyone who can help me.</description><pubDate>Wed, 13 Mar 2013 10:45:11 GMT</pubDate><dc:creator>gdraghetti</dc:creator></item><item><title>permission issue with sql login</title><link>http://www.sqlservercentral.com/Forums/Topic1428720-359-1.aspx</link><description>I have a stored proc that gets executed by SQL login which has execute access to the schema owned by stored proc.Inside the stored proc, it has insert statement to another DB which this sql login doesn't have access to. How do I get around it?Third party app calls the stored proc.Thanks for your help.</description><pubDate>Fri, 08 Mar 2013 11:49:14 GMT</pubDate><dc:creator>SQL_Surfer</dc:creator></item><item><title>Scuba Security Audit Findings: 2005 Text formatting, unchecked buffers</title><link>http://www.sqlservercentral.com/Forums/Topic1428705-359-1.aspx</link><description>I am a fairly new MS SQL database administrator, (with considerable SQL programmer/developer experience).  My new company hired me fast because I was the best qualified database professional available immediately.  They needed someone in here pronto to help them pass a federal security audit comming up early next month.  The second week I was working, federal auditors came in here to run Scuba scans, (by Imperva), of our databases.  I've managed to get a good momentum elliminating these findings and have only put my users on ice a couple of times in the month since then ;-).We only have a month left and now I have this annoying Scuba finding affecting my 2005 and 2008 databases - and thus endangering our audit success.  Problem is, I can only find documentation on this issue for version 7 and 2000 - not 2005 or 2008.  I had been working off my own Scuba scans and ignoring that finding.  Today, we received the official report and it lists this issue, too.  I imagined that the feds would comb through the Scuba findings and realize that that particular issue wasn't valid.  I know, I know - how naive!Has anyone ever effectively documented - or remidiated, if possible, this finding in Scuba?  If so, I would greatly appreciate any guidance.Thank you for your consideration and assistance!- JackieVersions:  9.0.5292 on 2003 R2 SP2  9.0.5069 on 2008 R2 Standard SP1</description><pubDate>Fri, 08 Mar 2013 11:04:39 GMT</pubDate><dc:creator>jacqueline.trent</dc:creator></item><item><title>How to audit a single login</title><link>http://www.sqlservercentral.com/Forums/Topic1426970-359-1.aspx</link><description>I have a request to elevate security on a single login.  I would like to be able to audit all activity for this login while the security is elevated to make sure no data edits are made.  Is there a way to trace or audit all activity for a single login?</description><pubDate>Tue, 05 Mar 2013 11:53:30 GMT</pubDate><dc:creator>Chris Burk</dc:creator></item><item><title>Event ID 11 "There are multiple accounts with name MSSQLSvc/..."</title><link>http://www.sqlservercentral.com/Forums/Topic907146-359-1.aspx</link><description>I'm seeing this event in my domain system event logs:EventID : 11There are multiple accounts with name MSSQLSvc/server1.domain.com:1433 of type DS_SERVICE_PRINCIPAL_NAME.EventID : 11There are multiple accounts with name MSSQLSvc/server2.domain.com:1433 of type DS_SERVICE_PRINCIPAL_NAME.EventID : 11There are multiple accounts with name MSSQLSvc/server3.domain.com:1433 of type DS_SERVICE_PRINCIPAL_NAME.I've tracked down the duplicates but I'm not sure how to resolve the issue.We use a domain account to run the SQL services on three different machines. The domain service account has SPNs for each of the SQL boxes like so:MSSQLSvc/server1.domain.com:1433MSSQLSvc/server2.domain.com:1433MSSQLSvc/server3.domain.com:1433Do I:a] do nothingb] delete the SPN from each of the server objectsc] delete the SPNs from the service account objectd] some combination of b and ce] __________?I'm leery of doing "b" and I'm not sure of the impact of "c". Everything I have found searching talks of two domain [b][i]machines[/i][/b] but not the situation of machine+serviceaccount. Any suggestions?</description><pubDate>Tue, 20 Apr 2010 12:16:13 GMT</pubDate><dc:creator>merodach</dc:creator></item><item><title>Kerberos Not Set Up On Server</title><link>http://www.sqlservercentral.com/Forums/Topic1415972-359-1.aspx</link><description>HelloAnother party set up the Server and Databases.First the Server was set up   Windows Server 2008 SP1Then the Databases were set up    SQL Server 2008 along the reporting Services    Server Authentication - SQL Server and Windows Authentication Now I go to use Reporting Services with Integrated Windows Authentication and find Kerberos was never set up.So I ran this to check the KerberosSELECT auth_scheme FROM sys.dm_exec_connections WHERE session_id = @@spid And I got NTLMSO my question is:If I set Kerberos now, will this cause any issues?ThanksFRED </description><pubDate>Tue, 05 Feb 2013 10:07:31 GMT</pubDate><dc:creator>FREDERICK</dc:creator></item><item><title>Simple Auditing Setup</title><link>http://www.sqlservercentral.com/Forums/Topic1405992-359-1.aspx</link><description>I want to setup an auduting system witout buying any 3rd party tools where in i am looking to get details about all databases in the server and last accessed date. Also i want to make sure any backup jobs that access the database for backing up the database should not be considered.</description><pubDate>Fri, 11 Jan 2013 07:04:11 GMT</pubDate><dc:creator>Tara-1044200</dc:creator></item><item><title>Best way to monitor or audit SQL</title><link>http://www.sqlservercentral.com/Forums/Topic1412612-359-1.aspx</link><description>Hello,I'm looking for any thoughts on a good monitoring tool for SQL server 2005. Although the users are safely locked out and using the front end application as they should be the auditors are still asking what I'm doing to monitor the back-end SQL accounts such as "sa" even though this account is not handed out to anyone.Without breaking the bank what can you suggest that might meet my needs to make the auditors happy?Thank you for the help.</description><pubDate>Mon, 28 Jan 2013 12:44:35 GMT</pubDate><dc:creator>shusta</dc:creator></item><item><title>Audit Drop login</title><link>http://www.sqlservercentral.com/Forums/Topic1411001-359-1.aspx</link><description>hello,what are the different ways to audit if some one drops login, and which would be the best.please reply its urgent</description><pubDate>Thu, 24 Jan 2013 02:32:35 GMT</pubDate><dc:creator>Zeal-DBA</dc:creator></item><item><title>Is there any way to script out Linked server with remote login password ?</title><link>http://www.sqlservercentral.com/Forums/Topic1408029-359-1.aspx</link><description>I have couple of linked servers on SQL server 2005 need to migrate to another SQL server 2005.I have to script out remote login password as well. when i script out Linked server,it won't bring password. it come up with hashed '#####'. There is no way to find out password from my team or application users. Is it possible to script out linked server with remote login credential ?Can someone guild me how to resolve this issue ?</description><pubDate>Wed, 16 Jan 2013 12:09:24 GMT</pubDate><dc:creator>SQLDBA346</dc:creator></item><item><title>SQL Server 2005 Certificates</title><link>http://www.sqlservercentral.com/Forums/Topic1406617-359-1.aspx</link><description>Hello,I would like some advice on cell based encryption please.I have transferred a database which uses a certificate to encrypt certain data from a live server to a newly built server.Now that the database is on a new server, the DECRYPTBYCERT function only returns null values when applied to the encrypted data. Please could someone confirm the best way to re-enable the function?The steps I think I should take are:-1. Backup Database Master Key on original server2. Transfer backup to new server3. Restore DMK using Server Master KeyAny help would be most appreciated.Regards,Andrew</description><pubDate>Mon, 14 Jan 2013 02:52:35 GMT</pubDate><dc:creator>Andrew Pruski</dc:creator></item><item><title>Msg 7416, Level 16, State 2, Line 1</title><link>http://www.sqlservercentral.com/Forums/Topic727484-359-1.aspx</link><description>I have created a linked server using Mgmt Studio (so no scripting to insert).I have included a "Script Linked Server as" -&gt; Create to[font="Courier New"]/****** Object:  LinkedServer [LinkName]    Script Date: 06/02/2009 09:33:28 ******/EXEC master.dbo.sp_addlinkedserver @server = N'LinkName', @srvproduct=N'any', @provider=N'SQLNCLI', @provstr=N'Server=ServerName;Database=DBName' /* For security reasons the linked server remote logins password is changed with ######## */EXEC master.dbo.sp_addlinkedsrvlogin @rmtsrvname=N'LinkName',@useself=N'False',@locallogin=NULL,@rmtuser=N'RemoteLogin',@rmtpassword='########'EXEC master.dbo.sp_addlinkedsrvlogin @rmtsrvname=N'LinkName',@useself=N'False',@locallogin=N'LocalLogin',@rmtuser=N'RemoteLogin',@rmtpassword='########'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'collation compatible', @optvalue=N'false'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'data access', @optvalue=N'true'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'dist', @optvalue=N'false'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'pub', @optvalue=N'false'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'rpc', @optvalue=N'false'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'rpc out', @optvalue=N'false'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'sub', @optvalue=N'false'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'connect timeout', @optvalue=N'0'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'collation name', @optvalue=nullGOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'lazy schema validation', @optvalue=N'false'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'query timeout', @optvalue=N'0'GOEXEC master.dbo.sp_serveroption @server=N'LinkName', @optname=N'use remote collation', @optvalue=N'true'GO[/font]I am using a SQL Login to query specific tables on a remote server.  I am not having any issues with the remote SQL Login it is working as expected.  When I give the local SQL Login just dbo permission on the local database I recieve the following error:[font="Courier New"]Msg 7416, Level 16, State 2, Line 1Access to the remote server is denied because no login-mapping exists.[/font]I grant the local login sysadmin and the linked server works.  So this begs the question, what permission specific to this local SQL Login do I have to grant without having to grant the login sysadmin?</description><pubDate>Tue, 02 Jun 2009 08:55:46 GMT</pubDate><dc:creator>erikskinner</dc:creator></item><item><title>Cannot run query as job, but can run it as a query</title><link>http://www.sqlservercentral.com/Forums/Topic1043889-359-1.aspx</link><description>I'm having issues running a job in SMSS 2005. The queries themselves work fine on their own through SQL queries, but when inputted as a job it refuses to run. This is the general query[code="sql"]EXEC msdb.dbo.sp_send_dbmail @profile_name='ABC MAIL',	@recipients='xxx@abc.com',	@subject='Stats report for yesterday',	@body='See attachment',	@query='(SELECT * FROM XXX.dbo.fnReportAgentStatsYesterday()) UNION (SELECT * FROM XXX.dbo.fnReportAgentStatsYesterdaySummary()) ORDER BY abcName',	@attach_query_result_as_file=1,	@query_attachment_filename='AgentStatsYesterday.csv',	@query_result_separator='	',	@query_result_no_padding=1[/code]Here's a log of what happened:[quote]Job 'Agent Stats Report' : Step 1, 'Report' : Began Executing 2011-01-06 12:02:42Msg 22050, Sev 16, State 1: Error formatting query, probably invalid parameters [SQLSTATE 42000][/quote]Also the function: fnReportAgentStatsYesterdaySummary is linked to another server database and they do not share the same domain.I'm guessing it's something to do with SQL agent, according to other posts, but if anyone knows anything, that would be much appreciated.</description><pubDate>Thu, 06 Jan 2011 10:48:58 GMT</pubDate><dc:creator>sunpyo.hong</dc:creator></item><item><title>SSMS Job\SSIS due to error 0x80070003 "The system cannot find the path specified."</title><link>http://www.sqlservercentral.com/Forums/Topic1196718-359-1.aspx</link><description>Hi All,I am logging on to a production M$ 2003 server using a domain administrator account xxxx\administrator. Then starting BIDS and have created a .dtsx package. The package uses a lookup to compare hearings in different Database tables and exports the differences. It runs fine in BIDS.I then log into SSMS 08 with the same domain account and setup the following;Security--------LOGIN: xxxx\administrator, SERVER ROLES:public, sysadmin, MAPPED: the 2 db's and MSDB sqlAgentoperator, sqlagentuser, slqagentreaderCredential----------Admin: Identity,  xxxx\administrator with correct passwordProxy----------myproxy: Admin with subsystem SSIS packages selectedJobs-----------Hearing job: Owner:xxxx\administrator, only 1 step 'check hearing type',Edit step: name ' check hearing type', type SQL SISS Package, Run As 'myproxy'Package Source: File SystemPacakge: C:\Documents and Settings\administrator.xxxxx\My Documents\Visual Studio 2008\Projects\Integration Services Project1\Integration Services Project1\Package2.dtsxSo I have logged in, created and running the package with the same domain administrator account, given it the SQL permissions. Created a credential for a proxy and told the package to use the proxy account to run as. But the package still doesn't run.Full Error Message:Executed as user: xxxxx\Administrator. Microsoft (R) SQL Server Execute Package Utility  Version 10.50.1600.1 for 64-bit  Copyright (C) Microsoft Corporation 2010. All rights reserved.    Started:  1:23:01 PM  Error: 2011-10-27 13:23:01.26     Code: 0xC0011007     Source: {883AAF08-4C73-4B47-900B-6B0A3E89C348}      Description: Unable to load the package as XML because of package does not have a valid XML format. A specific XML parser error will be posted.  End Error  Error: 2011-10-27 13:23:01.26     Code: 0xC0011002     Source: {883AAF08-4C73-4B47-900B-6B0A3E89C348}      Description: Failed to open package file "C:\Documents and Settings\administrator.SERVER1\My Documents\Visual Studio 2008\Projects\Integration Services Project1\Integration Services Project1\Package2.dtsx" due to error 0x80070003 "The system cannot find the path specified.".  This happens when loading a package and the file cannot be opened or loaded correctly into the XML &amp;#100;ocument. This can be the result of either providing an incorrect file name was specified when calling LoadPackage or the XML file was specified and has an incorrect format.  End Error  Could not load package "C:\Documents and Settings\administrator.SERVER1\My Documents\Visual Studio 2008\Projects\Integration Services Project1\Integration Services Project1\Package2.dtsx" because of error 0xC0011002.  Description: Failed to open package file "C:\Documents and Settings\administrator.SERVER1\My Documents\Visual Studio 2008\Projects\Integration Services Project1\Integration Services Project1\Package2.dtsx" due to error 0x80070003 "The system cannot find the path specified.".  This happens when loading a package and the file cannot be opened or loaded correctly into the XML &amp;#100;ocument. This can be the result of either providing an incorrect file name was specified when calling LoadPackage or the XML file was specified and has an incorrect format.  Source: {883AAF08-4C73-4B47-900B-6B0A3E89C348}  Started:  1:23:01 PM  Finished: 1:23:01 PM  Elapsed:  0.031 seconds.  The package could not be found.  The step failed.Any help would be very much appreciated :-D I have been browsing the net all day and haven't found anything I have missed, but there must be something.</description><pubDate>Wed, 26 Oct 2011 20:51:10 GMT</pubDate><dc:creator>ringovski</dc:creator></item><item><title>T-SQL to list all users and their permission for all databases of a server?</title><link>http://www.sqlservercentral.com/Forums/Topic886424-359-1.aspx</link><description>I need T-SQL script to list all users and their permission for all databases of a server?</description><pubDate>Fri, 19 Mar 2010 08:35:39 GMT</pubDate><dc:creator>rpatil22</dc:creator></item><item><title>SQL Jobs</title><link>http://www.sqlservercentral.com/Forums/Topic1393168-359-1.aspx</link><description>Hello,Is it possible in SQL Server 2005 Standard Edition SP1 to see who disable a SQL job?(C2 Audit is disable and must be disable for performance reasons)Thank you.</description><pubDate>Wed, 05 Dec 2012 12:25:38 GMT</pubDate><dc:creator>gbastea</dc:creator></item><item><title>Found a bug with Roles</title><link>http://www.sqlservercentral.com/Forums/Topic1390819-359-1.aspx</link><description>The scenario:SQL 9.0.4340, administering with SSMS 10.50.4000I grant a developer DataReader, DataWriter and DDLAdmin on several DBs on this development server.User complains of not being able to rename an stored procedure, as they should, being in the DDLAdmin role.Check this with Exec As and get and error that object does not exist or user does not have permission.Look at user account in that DB with SSMS and see it has DataReader, DataWriter and DDLAdmin checked, but disabled. Also see that this user owns the DataReader, DataWriter and DDLAdmin roles (also checked but disabled). Do not know why this is because users are never given ownership of any schemas when being added to the DB, period. In cases where a developer needs to put rights statement into their scripts they are given control over given schemas in Dev, but that’s as far as it goes.To fix I changed ownership of all schemas owned by user to dbo then the user no longer had any of those roles. User was granted those roles again and now works as it should.On another DB on the same server, same problem exists. Further investigation reveals that querying the user rights returns same info as SSMS GUI except that I don't see the the role entries are "disabled" as I do in SSMS.I look at the role properties by themselves for each, DataReader, DataWriter and DDLAdmin and see that it is owned by DBO. In one DB I changed the owner of DDLAdmin from DBO to DDLAdmin and then the user side was fixed, in that it no longer seemed to own that role's schema and I could modify the DDLAdmin roles membership for that user.I have a few databases exhibiting this behavior if anyone has any ideas or has further things to check. I am limited as to how much exact info I can post due to security considerations here.Thanks,Chris</description><pubDate>Thu, 29 Nov 2012 13:33:24 GMT</pubDate><dc:creator>Stamey</dc:creator></item><item><title>Hide all system views/tables from users in SQL server 2005</title><link>http://www.sqlservercentral.com/Forums/Topic671366-359-1.aspx</link><description>We have a request from client to hide all system views/tables from users in SQL server 2005.As user assigned to a specific database role, client do not want the user to see all system tables and INFORMATION_SCHEMA views, so they can have a clear view for only user tables in their schema.However, whenever they connect using Access via ODBC they get a huge list of sys and INFORMATION_SCHEMA views.Also when connecting from SQL Management Studio, they are getting same list.We have taken following steps, but no luck.1.      DENY permissions on "View Definition" at all scope levels but still the users can see all these views using ODBC.2.      Tried denying access by changing permissions to deny in the public role, but still the same.3.      Created one Role including deny permissions to all sys and INFORMATION_SCHEMA views and assigned to user, but same issue.Please advise is there any way of doing it</description><pubDate>Mon, 09 Mar 2009 05:49:04 GMT</pubDate><dc:creator>sivaprasad</dc:creator></item><item><title>SQL Authentication login weirdness...</title><link>http://www.sqlservercentral.com/Forums/Topic1386169-359-1.aspx</link><description>Forgive me upfront for not supplying a snapshot of this issue, but here is what happened.  I tried to log into an instance of SQL 2005 (have never had this issue come up before), but this time when I attempted to log in, after supplying my user ID and PW (it's a SQL Auth account - not AD from Windows) it came back with the prompt for me to change my password (claiming that it had expired).  I know for a fact that it was not set with the password expires policy, so I am wondering if someone wasn't messing around, and it caused my account to then expire? When I tried to supply it a password (the one I had previously given it) it stated something to the effect that the password could not be used at that time, and that it had set my context to the Master database with English as the language default.Very weird...We had an issue with the server that this instance is on, so I am wondering if it is just coincidence (and I am being paranoid) or if someone was messing around with my account.Any insight would be much appreciated!Thank you all in advance!SQL_ME_RICH</description><pubDate>Sun, 18 Nov 2012 23:51:25 GMT</pubDate><dc:creator>SQL_ME_RICH</dc:creator></item><item><title>Want to remove an existing user mapping for a login.</title><link>http://www.sqlservercentral.com/Forums/Topic1385873-359-1.aspx</link><description>In SQL Server 2012, I want to remove (programmatically in C# or via SQL command line) a login mapping to a user.  I have a login that is mapped to a database user and I want to remove that mapping without removing the login, user or database.</description><pubDate>Fri, 16 Nov 2012 15:25:54 GMT</pubDate><dc:creator>melvers</dc:creator></item><item><title>SQL Authentication login weirdness...</title><link>http://www.sqlservercentral.com/Forums/Topic1386164-359-1.aspx</link><description>Forgive me upfront for not supplying a snapshot of this issue, but here is what happened.  I tried to log into an instance of SQL 2005 (have never had this issue come up before), but this time when I attempted to log in, after supplying my user ID and PW (it's a SQL Auth account - not AD from Windows) it came back with the prompt for me to change my password (claiming that it had expired).  I know for a fact that it was not set with the password expires policy, so I am wondering if someone wasn't messing around, and it caused my account to then expire? When I tried to supply it a password (the one I had previously given it) it stated something to the effect that the password could not be used at that time, and that it had set my context to the Master database with English as the language default.Very weird...We had an issue with the server that this instance is on, so I am wondering if it is just coincidence (and I am being paranoid) or if someone was messing around with my account.Any insight would be much appreciated!Thank you all in advance!SQL_ME_RICH</description><pubDate>Sun, 18 Nov 2012 23:23:37 GMT</pubDate><dc:creator>SQL_ME_RICH</dc:creator></item><item><title>Please excuse and delete the dups</title><link>http://www.sqlservercentral.com/Forums/Topic1386170-359-1.aspx</link><description>feeling like a n00b.:-(</description><pubDate>Sun, 18 Nov 2012 23:52:15 GMT</pubDate><dc:creator>SQL_ME_RICH</dc:creator></item></channel></rss>