CONTROL SERVER vs. sysadmin membership
In a previous blog post on Detecting When a Login Has Implicit Access to a Database, I mentioned that having...
2009-03-06
13,175 reads
Brian Kelley
- Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology
Three Operating System (Windows) patches due on Tuesday
Microsoft's advance security bulletin has come out and it looks like they are planning on releasing 3 security bulletins on...
2009-03-06
692 reads
Detecting When a Login Has Implicit Access to a Database
Yesterday I blogged about how to figure out what database principals corresponded to what server principals . The key is to match up the SIDs between sys.server_principals and sys.database_principals. But I also stated there were 3 cases where the logins...
2009-03-05
2,928 reads
Owning an Object in SQL Server 2005/2008
One of the things that we have to re-learn when going from SQL Server 2000 to 2005/2008 is that objects...
2009-03-04
6,678 reads
Mapping Database Principals to Server Principals
A question on the forum asked how to find all the database mappings for a particular login. If you're on SQL Server 2000 or below, the tables you want to use are syslogins in the master database and sysusers in each database.
2009-03-03
4,468 reads
You Must Trust Your DBAs
This is a follow-on post to You Must Trust Someone. My point in that post was to establish that being able to and and actually trusting your account and server administrators is a necessity. I didn't go into the business aspect of that, but basically it boils down to having a good selection process for candidates, checking out their references, ...
2009-03-03
2,022 reads
A Security Control Inconsistently Applied Is Not a Control
Some things and readings today reminded me of this: a security control inconsistently applied is not a control. The whole...
2009-02-27
2,835 reads
First Impressions of the Kindle 2
As I blogged about previously, I had decided to go ahead and pre-order the Kindle 2. It was slated for...
2009-02-27
1,547 reads
You Must Trust Someone
After some recent talks with security folks and auditors, one of the things I have had a hard time getting across is that you must trust those folks responsible for account and server management when it comes to securing your data. Yes, you can put in...
2009-02-26
2,549 reads
Determining if a Server Principal Owns Database Objects
This question comes up a lot in the forums: "How do I know if the login owns any objects?" Usually...
2009-02-24
7,461 reads
Blogs
SQL Server Transaction Log Forensics: Preserving Evidence During an Incident
By SQLPals
SQL Server Transaction Log Forensics: Preserving Evidence During an Incident SQL...
What Does It Mean to Make Data AI-Ready?
By James Serra
Making Data AI-Ready, Part 1 (This is the first article in a three-part series...
Using the Data API Builder–VS Live San Diego Resources
By Steve Jones
Thanks for attending my sessions. Resources below: Slides: Using Data API Builder GitHub repo: ...
Forums
Hyperscale Replicas II
Comments posted to this topic are about the item Hyperscale Replicas II
Practical Reporting Queries with CROSS APPLY (Part 3)
Comments posted to this topic are about the item Practical Reporting Queries with CROSS...
Your Favorite Quotes
Comments posted to this topic are about the item Your Favorite Quotes
Question of the Day
Hyperscale Replicas II
How many Azure SQL DB Hyperscale HA replicas can be configured as of Sept 2026?
See possible answers