Auditing Your SQL Server Environment Part II Auditing Your SQL Server
In this article by Randy Dyess he shares with you the script on how he audits his environment and outputs reports of the permissions that users have.
2002-05-30
9,715 reads
Security
SQLsnake Worm Hits SQL Servers and Networks Hard
If you haven't changed the SA password on your SQL Server, you may be soon paying the price. Beginning last week, an old worm has come back in full force, infecting about 100 SQL Servers an hour. Reports of heavy port 1433 scanning began in early may but by the 22nd, the virus really began to take its hold on systems with no SA password.
2002-05-28
4,790 reads
SQL Security Resource Center Opens
SQLServerCentral.com is proud to launch it's first Resource Center for security. It's a one-stop shop for anything related to SQL Server security. All content is user-contributed and contains links to content throughout the web.
2002-05-20
65 reads
SQL Server Security Resources
As I work with a particular topic or problem, I often research on the Internet different opinions, white papers, etc. Here is a list of resources that are located both on SQLServerCentral.com and other sites that I have found useful.
2002-04-08
5,529 reads
Auditing Your SQL Server Environment Part I
Ever been placed into a new environment and couldn't
find an ounce of documentation? This article is the first in a series that will help you make an audit of your new environment
and determine if any SQL Server login does not have a password, has a password the same as the login name or a password that is only one character long.
2002-04-02
10,420 reads
Dynamic SQL vs. Static SQL Part 1 - Security
Sooner or later everyone who works with SQL Server hears that it is better to avoid dynamic SQL at all cost. Dynamic SQL will force you to give out more permissions than static SQL. This article by Robert Marda shows you some of the security issues with dynamic SQL.
2002-02-27
12,231 reads
Worst Practices - Encrypting Data
Continuing with the Worst Practices Series: Steve Jones examines why encryption in the database is a bad idea.
2002-01-08
8,415 reads
Enforcing Security in Multi-Tier Applications
The major part of the article, however, is dedicated to a topic that often confuses people and leads to some of the strongest disagreements among IT professionals and developers: the benefits and drawbacks of enforcing security in the middle (or business) tier versus the data tier.
2001-12-25
1,855 reads
Security Alert : SQL Server Security Bug and Patch
Happy Holidays database administrators! As a parting present before you go home for your year-end break, Microsoft has announced a security problem in SQL Server 7.0 and 2000.
2001-12-24
6,551 reads
Microsoft SQL Server 2000 Security
This document introduces the new security features of Microsoft SQL Server 2000. New features are outlined, and a detailed discussion is provided about how to best implement security in a Microsoft Windows 2000 domain environment. Source code examples are included for developers who want to implement the security model immediately.
2001-12-06
1,547 reads
Blogs
Storage Field Day 23 – SIOS
By kleegeek
I am thrilled to have been a part of this year’s Storage Field Day...
Getting a list of the articles in a publication.
The other day I was asked to supply a list of all of the...
Daily Coping 17 May 2022
By Steve Jones
I started to add a daily coping tip to the SQLServerCentral newsletter and to...
Forums
SSRS permissions basics
Is it possible via a query, specific to 'SSRS' (SQL Server Reporting Services) to...
Azure SQL Database Differential Backup Frequency
Comments posted to this topic are about the item Azure SQL Database Differential Backup...
The General Database Platform
Comments posted to this topic are about the item The General Database Platform
Ask SSC