Enhanced sp_help_revlogin  Read more...

This article outlines three different tried and tested methods of obtaining access to databases in SQL Server 2005 where no database-level administrative access exists.  Read more...

These scripts give you the list of logins created in the Last X Days for SQL Server 2000 or 2005.  Read more...

Script one or all roles in a database. Includes users, obect permissions and column permissions.  Read more...

Unless James Bond is in the picture, security is usually not a sexy topic. However, we all lament the lack...  Read more...

In a recent thread here on SQL Server Central, it was pointed out that a member of the securityadmin fixed...  Read more...

Use this script to search for SQL Server logins who use weak password  Read more...

Learn how to create a certificate signed stored procedure to solve common permissions problems using sp_send_dbmail. MVP Jonathan Kehayias brings us a short tutorial that discusses your options and code to show you how to implement certificate security.  Read more...

Encryption of data at rest is becoming more and more crucial in today’s world. This tip is aimed to help businesses that do not have the budgets or resources to purchase hardware encryption tools or to upgrade to SQL 2008. It basically illustrates how to achive transparent file encryption with SQL 2005 or SQL 2000.  Read more...

Every so often I see a post in a forum or on Twitter about the use of xp_cmdshell. Usually it is someone looking for...  Read more...

Welcome back to our last class this term on security in SQL Server here at SQL University. According to the syllabus,...  Read more...

Yan Pan explains how to set up proxies in SQL Server 2000, 2005 and 2008, and compares the differences between them  Read more...

Read more...

These scripts give you the list of logins created in the Last X Days for SQL Server 2000 or 2005.  Read more...

Check Orphaned logins ie, not associated with any database on the current instance.  Read more...

Creates statements for securables creation.  Read more...

Gaining insight into my SQL Server standard and Windows logins has historically been a challenge in terms of determining password changes, failed login attempts, etc. I have noticed that you have experienced the same issue with your tip entitled 'When was the last time the SQL Server sa password changed' and I have noticed some information in the forums on the topic as well.   Read more...

Security was a major focus of SQL Server 2005 during its development, both in terms of making the product secure as well as enhancing the options. Security expert Brian Kelley brings us a look at how the paradigm of logins has changed and what you need to look for in SQL Server 2005.   Read more...

Enhanced sp_help_revlogin  Read more...

Read more...