dan-572483 (10/5/2012)

---

When I came onto this job and looked at the SSMS Security node for the instances & DBs I was now reposonsible for, I saw long lists of logins...

*adds to toolkit*

Thanks Lowell!

You have a couple worlds colliding, data managers and backup operators, and you're trying to spoon-feed the data managers database backup capabilities. Which is fine, but data managers are not...

dan-572483 (10/5/2012)

---

It seems pretty straight forward to me. If someone leaves the company or moves to another department and no longer should have access to resources they used before,...

I do not think there have been substantial changes (if any) to the Agent Roles in 2012 but you can check it out:

SQL Server Agent Fixed Database Roles

The thing about...

This will give you the caller's IP address in...

Pro rata

First off setting the fill factor too low can affect read performance because it takes more pages to hold the same amount of data meaning more pages need to be...

Are you seeing issues on your instance that you think changing this value will help resolve? What specifically are you seeing?

Here is how to change it:

Using the SQL Server Service...

It sounds like you've looked into the SQLAgentOperatorRole and decided it offers too many permissions ("enable this without allow them to run ANY Agent job").

One possible solution would be to...

Securing a SQL Server is an extremely vast topic and requires a comprehensive approach not limited to just worrying about who has access to the instance as a sysadmin or...

It could. You can open a multi-query window against a CMS folder. You can also iterate over CMS registered...

Debatable

I agree that service accounts, depending on what level of permissions they have, may not be good candidates for Windows Group membership. That exception is not unlike the only exception...

Not everyone knows how to do these things. And for each of the items you mentioned there are additional steps that can be taken to mitigate those risks.

If I...