Forum Replies Created

Viewing 15 posts - 361 through 375 (of 6,105 total)

  • RE: Why NTLM instead of Kerberos

    Are you executing the query from the server itself? In other words, are you remoted in/logged in at the console of the server where SQL Server is installed and running...

  • RE: windows authentication and security risk

    Microsoft's recommendation in Books Online is that SQL Server Agent not be a member of the local Administrators group. However, it must be a member of the sysadmin fixed server...

  • RE: windows authentication and security risk

    That is correct. And if it's on a domain (which is a better security option than, in most cases), there are additional attack vectors. Here's a short write-up on them:

    Blog...

  • RE: How Encrypt all Table rows data

    Yes, but you will have to encrypt based on each column. Also, you won't want every column encrypted, for this will kill any performance because you will be indexing on...

  • RE: DECRYPTION Error

    Replace the portions of your code with the applicable portions of the code I posted and it will work. I tested before posting.

  • RE: windows authentication and security risk

    The key is to secure the server. If someone gains administrative control over the server, they have control of your SQL Server. You can't stop them. So I think you're...

  • RE: DECRYPTION Error

    What error are you getting? If it's the password complexity error, try a password of something like 4SQLAuthority! instead. If it's the string or binary data would be truncated, make...

  • RE: CONTROL SERVER vs. impersonate on login::sa

    Safer is to grant CONTROL SERVER. Here's why. CONTROL SERVER means an explicit DENY will be honored. CONTROL SERVER also means that any operation is undertaken with the identity of...

  • RE: When was Windows Domain Account last used?

    Bhuvnesh (4/25/2010)


    you can opt for C2 auditing although it is resource consuming as it's capturing all the database activity hence need to use only when high security is concern.

    Some...

  • RE: When was Windows Domain Account last used?

    Right, I commented on that thread. If you follow it through to the end, you'll see that SQL Server doesn't store this information. You have to audit it using other...

  • RE: When was Windows Domain Account last used?

    There isn't a query to show when any account was last used, even a SQL Server-based one. Can you post that? As far as when a Windows account last logged...

  • RE: Hiding payroll data from admin

    webrunner (4/23/2010)


    K. Brian Kelley (4/22/2010)


    It can't be done. Here's why...

    If I have admin rights on a server, I have debugging rights. If I have debugging rights, I can see the...

  • RE: SA account login

    Can you filter your network connections? In other words, are the computers that SHOULD be connecting to SQL Server coming from known IP addresses? If so, an IPSEC policy (OS...

  • RE: Hiding payroll data from admin

    It can't be done. Here's why...

    If I have admin rights on a server, I have debugging rights. If I have debugging rights, I can see the memory and I can...

  • RE: Access right's for executing stored procedure on sql server

    Is the account you're using to connect from Delphi the same account you're using when you run the stored procedure directly?

Viewing 15 posts - 361 through 375 (of 6,105 total)