I believe EM is supposed to set these, too, but you're right, these are needed. If you're on Win2K or Win2003, you can set these using the Local Security Policy...

I haven't written an article on the specifics of what permissions the account needs (need to... too many things going on right now), but the basic approach you've put together...

Cross-database ownership chaining only applies within the same instance. When you cross to a second instance, you're making a linked server (remote data) connection and you get a new security...

On Windows 2000 or Windows 2003, you or your system administrator can create an IPSec policy to restrict SQL Server access to only certain IP addresses or a range of...

OK, I know the reference then. Do you have a group of engineers who are in charge of Intrusion Detection and Incident Response in your organization or is this a...

I know you're on a single node and on SP3, but you may want to take a look at this KB article, specifically for the registry keys mentioned.

http://support.microsoft.com/default.aspx?scid=kb;en-us;299362

K. Brian Kelley

http://www.truthsolutions.com/

Author:...

Very good point. I had to consult on a friend's security setup (ISP with web and SQL Server hosting) a few months ago. The customer was complaining someone had hacked...

What, specifically, are you looking to do with the IDS? That may be a better question. There are folks out there using a wide range of products. Some use Snort,...

Would this lead to a secure system? I would say no.

Let's assume HR controls all the users and all the passwords, that includes the local administrator account for the...

Maybe a congrats in the newsletter whenever a user goes over 500?

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/

Why even SELECT may be bad...

We have an app where the developers have SELECT rights against all the tables. (DBAs lost that battle.) A few days ago a developer put...

Hide server will shift the port to TCP/2433. This is hard-coded. Also, if you watch the UDP traffic on 1434 for a "hidden" server, it's not so hidden.

K. Brian...

Okay, got an update. The emails are already flying out of Microsoft to patch immediately (same urgency as with MS03-026). It will work on Windows 2000 SP2 systems as well....

Baseline the server now before the application is installed. When the application is put on the server, if everything tanks, you have the baseline to refer back to as a...

IF you have administrative rights to the system. Grab the pstools suite from sysinternals.

http://www.sysinternals.com/ntw2k/freeware/pstools.shtml

Use pslist to look to see if sc or scm is running. If it's running, use pskill...