The Database Owner Role in SQL Server: A Call for Least Privilege
June 9, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Introduction … Read more
When SQL Server Database Owners Are NULL or Mismatched
June 8, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Let’s … Read more
SQL Server Logins: The Bad, the Worse, and the Ugly
June 7, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. SQL … Read more
The Dangers of Modifying the SQL Server Public Role
June 6, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Introduction … Read more
Role-based Access Control In SQL Server, and You
June 5, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Role-Based … Read more
What securityadmin Role Members Can and Cannot Do
June 4, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Based … Read more
CONTROL SERVER Permissions Are the Hidden SQL Server Superpower [30 SQL Server Security Checks in 30 Days]
June 3, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. The … Read more
Your Biggest SQL Server Security Vulnerability Is Your sysadmin Role Members [30 SQL Server Security Checks in 30 Days]
June 2, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. It … Read more
Disable the sa Login [30 SQL Server Security Checks in 30 Days]
June 1, 2024
This post is part of our SQL Server security blog series, 30 SQL Server Security Checks in 30 Days. We’re publishing a new security check every day in the month of June. Visit our sp_CheckSecurity page to learn about our free SQL Server tool you can download and run to check your own server. Please … Read more
SQL Server Tool Update: sp_CheckSecurity version 1.1
May 31, 2024
Since releasing our initial version of sp_CheckSecurity, we have received quite a bit of feedback. Thank you for all the emails, blog comments, and issues noted in GitHub, that have all been helpful in directing us towards making this SQL Server tool more useful. Today we are announcing the release of version 1.1, available for download … Read more