Browse by Tags

• Articles
• Configuration
• Database Administration
• Miscellaneous
• Operations Manager
• Rants and Ramblings
• Transact-SQL

• Creating a Database Role to Allow Users to Script Object Definitions

  In the past month I’ve answered a couple of questions similar to: Is there a database role I can assign (other than dbo) that will allow a user to "see" stored procedures.  As it is, I have granted the user db_datareader so, from SSMS, Read More... Posted Wednesday, August 04, 2010 11:47 PM by Jonathan Kehayias | 1 Comments Filed under: Database Administration, Security

• The Database as Intellectual Property

  Every so often, a question shows up on the forums in the form of, “How do I prevent anyone from accessing my database schema, including local administrators and sysadmins in SQL Server?”  I usually laugh a little shake my head when I read a question Read More... Posted Thursday, May 06, 2010 6:31 PM by Jonathan Kehayias | 4 Comments Filed under: Rants and Ramblings, Miscellaneous, Security

• SQL Server Installation Checklist

  The other night I was asked on Twitter by Todd McDonald (Twitter), for a build list for SQL Server 2005 and 2008.  My initial response was to provide a link to the SQL Server Build List Blog , which documents all of the builds of SQL Server and provides Read More... Posted Monday, March 22, 2010 11:31 PM by Jonathan Kehayias | 22 Comments Filed under: Database Administration, Security, Configuration

• Monitoring SQL with SCOM 2007 Least Privilege Access

  A while back I had a question about why/what specifically the NT AUTHORITY\SYSTEM (Local System) account would need to be a sysadmin in SQL Server 2008.  It is after all configured this way by default setup, even when using domain user accounts to Read More... Posted Thursday, March 04, 2010 6:45 AM by Jonathan Kehayias | 0 Comments Filed under: Security, Operations Manager

• Question: Is NT AUTHORITY\SYSTEM a sysadmin in your SQL Server and Why?

  I asked this on twitter and now I am going to ask it on here to see what kind of responses I get.  If your SQL Server services run under a domain user account, is NT AUTHORITY\SYSTEM (Local System) a sysadmin in your SQL Server and if so, why? I Read More... Posted Wednesday, January 27, 2010 10:10 PM by Jonathan Kehayias | 11 Comments Filed under: Database Administration, Security

• New Article on SQL Server Central: Using a Certificate Signed Stored Procedure to Execute sp_send_dbmail

  Part of the reason for a reduction in the amount of blogging that I have been doing is that I have tried to expand the amount of information that I put into writing up a topic and instead of blogging those topics, publish them as articles online.  Read More... Posted Thursday, December 17, 2009 3:58 AM by Jonathan Kehayias | 1 Comments Filed under: Transact-SQL, Database Administration, Security, Articles

• MS09-062 - Critical: Vulnerabilities in GDI+ Could Allow Remote Code Execution

  Microsoft released a new Critical Security Bulletin that affects SQL Server today. http://www.microsoft.com/technet/security/bulletin/ms09-062.mspx If you haven't ever actually looked at one of these, let me first tell you that you can expect to be completely Read More... Posted Tuesday, October 13, 2009 6:01 PM by Jonathan Kehayias | 6 Comments Filed under: Security

• Customizing the TCP Port for the Dedicated Administration Console (DAC)

  If you have a multi-instance SQL Server 2005/2008 Server that is behind a firewall, and you want to be able to remotely connect to the DAC, you have to create firewall rules that allow the TCP ports for the DAC through the firewall.  You can easily Read More... Posted Friday, June 26, 2009 1:30 AM by Jonathan Kehayias | 1 Comments Filed under: Database Administration, Security

• Securing Production Servers from Developers with SSMS and Application Usernames/Passwords

  As a DBA I have all kinds of elevated access that most people don't.  I guess when I was younger this was a novelty but it really isn't anymore.  I have access to the master list of usernames and passwords for all kinds of stuff, but would never Read More... Posted Wednesday, June 18, 2008 1:28 PM by Jonathan Kehayias | 1 Comments Filed under: Database Administration, Security