Forum Replies Created

Viewing 15 posts - 391 through 405 (of 6,104 total)

  • RE: Alternatives to using Builtin\Adminstrators

    I agree with George here. Create a Windows group strictly for the DBAs. Use that group to manage the SQL Servers. That prevents anyone from having to know the sa...

    K. Brian Kelley
    @kbriankelley

  • RE: KERBEROS AND SSIS 2008 ?

    As per the article, the SQL Server Integration Services service does not support Kerberos delegation. Therefore, there is no SPN available for the SSIS side. For configuring a SQL Server...

    K. Brian Kelley
    @kbriankelley

  • RE: An Administrative Security Hole?

    TravisDBA (2/10/2010)


    Ben,

    Restoring backups or copying and attaching files as a way of gaining access to someone's data has been virtually eliminated through TDE. If you attempt either operations on an...

    K. Brian Kelley
    @kbriankelley

  • RE: An Administrative Security Hole?

    TravisDBA (2/9/2010)


    Copying database files with the service down and possibly attaching the database files to another machine is useless if the data and log files are encrytped using (TDE) and...

    K. Brian Kelley
    @kbriankelley

  • RE: An Administrative Security Hole?

    Steve Jones - Editor (2/9/2010)


    It's not that I did not realize an Admin could do something like attach a debugger or copy files. It's the fact that it is so...

    K. Brian Kelley
    @kbriankelley

  • RE: Object Level Permissions

    Keep in mind that with securables, permissions are inherited. So if I grant EXECUTE at the schema level, then the user has EXECUTE rights on all stored procedures within that...

    K. Brian Kelley
    @kbriankelley

  • RE: Object Level Permissions

    INNER JOIN is going to filter out data. This should do it:

    Quick 2005/2008 Script to Export Permissions

    K. Brian Kelley
    @kbriankelley

  • RE: Getting mac address using xp_cmdshell

    There should be no restriction from an xp_cmdshell perspective. Can you get other xp_cmdshell commands to run, like dir c:\, and the like? Also, are you using the exact same...

    K. Brian Kelley
    @kbriankelley

  • RE: Object Level Permissions

    Yes. Take a look at sys.database_permissions.

    K. Brian Kelley
    @kbriankelley

  • RE: Objects ownership in SQL2000

    Then you will need to use sp_changeobjectowner to change the ownership of the object, if that's the case. A simple script will do this. Something like this should build the...

    K. Brian Kelley
    @kbriankelley

  • RE: Objects ownership in SQL2000

    Do you mean it's a member of the db_owner role?

    If that's the case, you must specify the owner during object creation. For instance:

    CREATE TABLE dbo.Foo (Moo int);

    GO

    K. Brian Kelley
    @kbriankelley

  • RE: Detect Users Using Admin Account

    Server side trace is your only option. My recommendation is to schedule the downtime, make the password change, and update the systems. You'll spend a whole lot less time doing...

    K. Brian Kelley
    @kbriankelley

  • RE: Retrieve the password of sa account

    If you have locked yourself out of SQL Server, look at single-user mode. As far as retrieving passwords? Can't be done. SQL Server stores a hash of the password, not...

    K. Brian Kelley
    @kbriankelley

  • RE: Just SQL Auth

    Unless you go to a situation where Windows services like SQL Server Agent can use SQL Server-based logins, Windows authentication is going to be required. Sorry, that's the way it...

    K. Brian Kelley
    @kbriankelley

  • RE: A Bad Litmus Test

    Gary Istvan Varga (11/10/2009)


    I must say that I don't get it. I would like to think that people knew who these people are, and it seems most of us do...

    K. Brian Kelley
    @kbriankelley

Viewing 15 posts - 391 through 405 (of 6,104 total)