Category: Security (Encryption & Permissions)
-
Dynamic Data Masking: What a WHERE Clause Still Reveals
A masked salary can still be tested with WHERE. This HPAI01 example shows the row returned to a low-privilege user and what Dynamic Data Masking does not protect.
Written by
-
SQL Server Row-Level Security: The Filter Does Not Stop Cross-Tenant Writes
A Row-Level Security filter can hide another tenant’s rows while still allowing a cross-tenant insert. See the HPAI01 reproduction, add block predicates, and treat session context as a trust boundary.
Written by
-
Set the Default Database for a SQL Server Login
One line sets a login default database, and SQL Server never checks that the login can actually use it. The failure arrives at the next connection, with the same message whether the database is gone or just inaccessible.
Written by
-
CREATE USER WITHOUT LOGIN vs Contained Database Users
Both look like a user with no login and they are opposites. How to tell them apart, what each is for, and the migration break that fails silently.
Written by
-
DBA Scripts: Get Linked Servers
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Server & Configuration › Server Inventory Choose the linked-server check you need Start with Get-LinkedServerConnectivity to check whether a linked server is reachable and see the returned error detail. For a migration pre-check, run Get-LinkedServerAndJobInventory for logins, linked servers, and SQL Agent jobs.…
Written by
-
DBA Scripts: Get Edition Feature Usage
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Server & Configuration › Server Inventory What Actually Breaks If You Downgrade This Instance Edition downgrades, Enterprise to Standard, Standard to Web, look simple until you discover a feature that only Enterprise supports has quietly been in use the whole time. TDE-encrypted databases…
Written by
-
DBA Scripts: Get Orphaned Users
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security The Login Exists, the Database Still Says No An account that worked last week stops working against one database. The password is right, the login is there in Object Explorer, the user is still in the database with its roles intact, and…
Written by
-
DBA Scripts: Get Backup Encryption Status
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Backup & Recovery TDE (Transparent Data Encryption) and backup encryption are two different things that get confused constantly. TDE encrypts the data and log files at rest. It does not automatically encrypt your backups in a way msdb tracks as an encrypted backup…
Written by
-
DBA Scripts: Get Sysadmin Members
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security Identify SQL Server Logins With Sysadmin Access The sysadmin fixed server role provides unrestricted access to a SQL Server instance. Members of this role can perform any operation on the server, including creating databases, changing security settings, accessing all data, and modifying…
Written by
-
DBA Scripts: Get Migration Login Audit and Post-Migration Validation
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Migration & Deployment You are about to move logins to a new server, or you just did and something cannot log in. These 2 scripts cover both ends: Get-MigrationLoginAudit tells you what each login needs on the target, and Get-PostMigrationValidation gives you 13…
Written by
- RESOURCE_SEMAPHORE When SQL Server Is Nowhere Near Its Memory Cap
- Dynamic Data Masking: What a WHERE Clause Still Reveals
- DBA Scripts: Get Log Shipping Status
- SQL Server Row-Level Security: The Filter Does Not Stop Cross-Tenant Writes
- View the Definition of a Stored Procedure in SQL Server
- TempDB Is Full or Still Growing: Find What Is Using It, Right Now
- Backups & Recovery (17)
- DBA Scripts (152)
- High Availability (HA) (13)
- Installation & Configuration (49)
- Maintenance (25)
- Migration & Upgrades (14)
- Monitoring (9)
- Performance Tuning (37)
- Security (Encryption & Permissions) (21)
- Storage & Capacity (16)
- T-SQL Fundamentals (15)
- Troubleshooting (95)
- Wait Types (235)