As consultants we are sometimes asked the following question: “We have an old version of SQL that we can’t turn off and no one has access to it. Is there a way to create an account on a server you don’t have access to?” The answer is YES, and it isn’t as difficult as you … Read more
SQL Server is a repository of critical data, attracting potential threats from malicious individuals seeking financial gains. As a SQL Server DBA, it is essential to assess the security vulnerabilities of your SQL Server and perform an access audit to ensure the safety of your data SQL Server Vulnerability Scan I recommend you start with … Read more
Welcome to Myths and Misconceptions Month, or “Mythconceptions Month,” as we have lovingly referred to it in our internal discussions preparing this month’s content. We will have posts about the major Myths and Misconceptions we met as SQL Server DBA consultants. We hope you learn a lot from it! On to the content! Many companies … Read more
This month I am providing a 12-point checklist of scripts to check your SQL server’s current security posture. Use these scripts to get an idea of where you are, so that you can make plans for the places you may want to go. The paradigms of least privilege and defense in depth are important to … Read more
I hope you joined us for our monthly webinar and team discussion about SQL Server Health Checks in June! Our web guy should have the recording for that and some other posts from it soon. Check it out! This month – on Thursday, 7/21/2022, we’ll be discussing Security and Ransomware. Why are we talking about … Read more
When clients need help, bugs require patching and production deadlines loom large, it’s easy to think that cutting a few corners is the “right thing” to do. I’ve done it, and I’m willing to bet that many of you have as well. Doing so puts the security of your company’s data at risk and makes … Read more
This isn’t the complete guide to securing a SQL Server, but these are some of the more common things I bump into and wish I wouldn’t when it comes to SQL Server Security. Read these practices, understand them by searching the web or come here and ask me for questions or advice. If it means … Read more