Brian Kelley

Brian Kelley is an author, columnist, and Microsoft SQL Server MVP focusing primarily on SQL Server security. He is a contributing author for How to Cheat at Securing SQL Server 2005 (Syngress), Professional SQL Server 2008 Administration (Wrox), and Introduction to SQL Server (Texas Publishing). Brian currently serves as an infrastructure and security architect. He has also served as a senior Microsoft SQL Server DBA, database architect, developer, and incident response team lead.

Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology

All authors

[Off-Topic] Eleven Year-Old Making a Difference

by Brian Kelley

Databases – Infrastructure – Security

Those who know me personally know that I grow my hair out to donate for kids. I have donated a...

2009-03-09

1,009 reads

Adobe Flash Player Update Available

by Brian Kelley

Databases – Infrastructure – Security

There is an Adobe Flash Player available to address a security issue. The bulletin shows as being released February 24,...

2009-03-06

1,314 reads

CONTROL SERVER vs. sysadmin membership

by Brian Kelley

Databases – Infrastructure – Security

In a previous blog post on Detecting When a Login Has Implicit Access to a Database, I mentioned that having...

2009-03-06

12,770 reads

Three Operating System (Windows) patches due on Tuesday

by Brian Kelley

Databases – Infrastructure – Security

Microsoft's advance security bulletin has come out and it looks like they are planning on releasing 3 security bulletins on...

2009-03-06

684 reads

Detecting When a Login Has Implicit Access to a Database

by Brian Kelley

SQLServerCentral.com

Blogs

Yesterday I blogged about how to figure out what database principals corresponded to what server principals . The key is to match up the SIDs between sys.server_principals and sys.database_principals. But I also stated there were 3 cases where the logins...

★ ★ ★ ★ ★ ★ ★ ★ ★ ★

You rated this post out of 5. Change rating

2009-03-05

2,928 reads

Owning an Object in SQL Server 2005/2008

by Brian Kelley

Databases – Infrastructure – Security

One of the things that we have to re-learn when going from SQL Server 2000 to 2005/2008 is that objects...

2009-03-04

6,655 reads

Mapping Database Principals to Server Principals

by Brian Kelley

SQLServerCentral.com

Blogs

A question on the forum asked how to find all the database mappings for a particular login. If you're on SQL Server 2000 or below, the tables you want to use are syslogins in the master database and sysusers in each database.

★ ★ ★ ★ ★ ★ ★ ★ ★ ★

You rated this post out of 5. Change rating

2009-03-03

4,468 reads

You Must Trust Your DBAs

by Brian Kelley

SQLServerCentral.com

Blogs

This is a follow-on post to You Must Trust Someone. My point in that post was to establish that being able to and and actually trusting your account and server administrators is a necessity. I didn't go into the business aspect of that, but basically it boils down to having a good selection process for candidates, checking out their references, ...