Category: Security (Encryption & Permissions)
-
DBA Scripts: Get Version Upgrade Readiness
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Migration & Deployment Before You Upgrade: What’s Actually Going to Break Migration Risk Assessment covers per-database risk findings when moving to different hardware or infrastructure. This post covers a narrower, earlier question: on THIS server, staying on the same infrastructure, what needs attention…
Written by
-
DBA Scripts: Get Login and Job Inventory
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security Two Plain Inventories Every Migration Plan Needs Permissions and Role Membership and SQL Agent and Jobs cover the deep dive. These two are the plain inventory underneath both: Get-LoginInventory — the logins a migration has to recreate, by type and status. No…
Written by
-
DBA Scripts: Get Audit Specifications, DDL Triggers, and Proxy Credentials
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security Three Kinds of Infrastructure Most Servers Never Had in the First Place A schema change or a new login fails on an inherited server and nothing in your own code explains it, an auditor asks what this instance records, or a SQL…
Written by
-
DBA Scripts: Get Certificates, Keys, and TDE Status
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security Check Certificate Expiry and TDE State A certificate is about to expire, a TDE restore has failed with Msg 33111, or someone needs to know which databases are encrypted. These scripts give you every certificate with its days left, the certificate behind…
Written by
-
DBA Scripts: Get Login Security Audit
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security What’s Actually Happening at the Login Level, Not Just Who’s Allowed Permissions and Role Membership covers who can do what. These three scripts cover something different: what’s actually happening at the login layer right now. Get-FailedLoginSummary surfaces brute-force patterns and locked accounts…
Written by
-
DBA Scripts: Get Permissions and Role Membership
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security Who Can Actually Do What, at Every Level Sysadmin Members answers the single highest-stakes question: who has unrestricted access. These four scripts answer everything underneath that: explicit object and schema grants inside a database, explicit server-level grants and denies on logins, database…
Written by
-
Forcing Encrypted Connections in SQL Server Using Certificates
In the previous post, we looked at how to verify what protocol and encryption SQL Server is actually using at runtime. That answers the question: What is happening on the wire right now? This post answers a different one: How do I make sure every TCP connection is encrypted, every time? Forcing encryption in SQL…
Written by
-
Grant VIEW SERVER STATE in SQL Server
🚨Part of the SQL Server Errors series, the exact messages and what actually causes them.In: Security Msg 300 · Level 14 · State 1 VIEW SERVER STATE permission was denied on object ‘server’, database ‘master’. Msg 297, Level 16, State 1 The user does not have permission to perform this action. ⚡GRANT VIEW SERVER STATE…
Written by
-
Working with SQL Server Database Master Keys
SQL Server uses an encryption hierarchy to protect secrets such as credentials, asymmetric keys and certificates. At the database level, that hierarchy is anchored by the database master key (DMK). Because all other encrypted objects depend on it, losing access to the DMK can render those objects unusable. This post walks through how to: It…
Written by
-
DBA Scripts: Get Database Mail and xp_cmdshell Configuration
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security An audit or a pen test report asks whether xp_cmdshell is on, or alert emails stopped arriving and you need to know whether Database Mail is even switched on. This script answers both in one result, alongside CLR, force encryption and live…
Written by
- RESOURCE_SEMAPHORE When SQL Server Is Nowhere Near Its Memory Cap
- Dynamic Data Masking: What a WHERE Clause Still Reveals
- DBA Scripts: Get Log Shipping Status
- SQL Server Row-Level Security: The Filter Does Not Stop Cross-Tenant Writes
- View the Definition of a Stored Procedure in SQL Server
- TempDB Is Full or Still Growing: Find What Is Using It, Right Now
- Backups & Recovery (17)
- DBA Scripts (152)
- High Availability (HA) (13)
- Installation & Configuration (49)
- Maintenance (25)
- Migration & Upgrades (14)
- Monitoring (9)
- Performance Tuning (37)
- Security (Encryption & Permissions) (21)
- Storage & Capacity (16)
- T-SQL Fundamentals (15)
- Troubleshooting (95)
- Wait Types (235)