muthyala_51 (4/3/2014)

---

If we disable sa login on the server and all the database owners are sa. Do we see any conflicts in the reboot of the machine or restart of...

Dealing with the compromise

If you're only worried about this individual SQL Server, you all are thinking too narrowly.

What typically happens is an attacker gets control of one system and then...

Since you don't know what all was done, consider this server compromised (permanently). That means the OS and means the attacker could potentially come back in. Therefore, if possible, build...

I don't think you're going to find a function with just distance. Maybe with a point. The reason I say this is in 2D space there would be two lines...

Is there a reason to do this in SQL Server? Typically this sort of operation is best done in the application. For instance:

http://stackoverflow.com/questions/4763611/replace-multiple-words-in-string

That's one of the reasons I like Tom LaRock's book and recommended it. Usually folks transition into a DBA position in an existing company or after a body of work...

Start with this book:

http://www.amazon.com/DBA-Survivor-Become-Rock-Star/dp/1430227877

It has good, practical advice on how to break into a DBA role and what you need to know once you get in one.

Also, it's SQL...

It is possible to give you permission to create an object without giving you permission to touch the object. The most simplest way this can occur is by making you...

GreenSQL is in the space for this. It sits between the app server and the database server. However, no solution is perfect.

http://www.greensql.com/

Some IDS/IPS can help as well. But they'll...

If it's SQL Server 2008 or higher, use the Instance Name for the port. A Domain Admin will need to use setspn to put in the SPN:

http://technet.microsoft.com/en-us/library/ms191153.aspx

patboner (12/18/2013)

---

That is the problem - it does not exist on the OU level and I would very much like it to 🙂

We have quite a few Service accounts and...

Slevin (12/18/2013)

---

rstone (12/17/2013)

---

I think I was confusing delegation with impersonation. As a sysadmin, I sometimes use EXECUTE AS to impersonate a login to test permissions. In this case,...

Slevin (12/17/2013)

---

EdgeOfKnowWare (12/17/2013)

---

SPNs (Server Principal Names) need to be generated for all servers involved. This can be automatic by giving the AD account that is used as the service...

rstone (12/17/2013)

---

When the trust for delegation is enabled, can I, as a sysadmin, use SQL Server to impersonate the domain admin account?

We have a vendor that claimed they...

Slevin (12/17/2013)

---

K. Brian Kelley (12/17/2013)

---

Please use constrained delegation (selecting the 3rd option) if configuring Kerberos delegation. It's considered a significant security risk to use unconstrained delegation (where any server can...