Category: Security (Encryption & Permissions)
-
DBA Scripts: Get Login and Job Inventory
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security Two Plain Inventories Every Migration Plan Needs Permissions and Role Membership and SQL Agent and Jobs already cover the deep-dive on access and job health. These two scripts are the plain, focused inventory underneath both: Get-LoginInventory lists every server login by type…
Written by
-
DBA Scripts: Get Audit Specifications, DDL Triggers, and Proxy Credentials
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security Three Kinds of Infrastructure Most Servers Never Had in the First Place Some security infrastructure isn’t misconfigured, it just doesn’t exist. Get-AuditSpecifications checks for SQL Server Audit, the formal compliance mechanism for SOX/GDPR/PCI-DSS, and most inherited servers have none configured at all.…
Written by
-
DBA Scripts: Get Certificates, Keys, and TDE Status
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security The Encryption Layer Nobody Monitors Until It Expires Certificates created for TDE, backup encryption, or an Availability Group encrypted endpoint get created once and then quietly forgotten. An expired certificate doesn’t break TDE in memory on the server that has it, but…
Written by
-
DBA Scripts: Get Login Security Audit
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security What’s Actually Happening at the Login Level, Not Just Who’s Allowed Permissions and Role Membership covers who can do what. These three scripts cover something different: what’s actually happening at the login layer right now. Get-FailedLoginSummary surfaces brute-force patterns and locked accounts…
Written by
-
DBA Scripts: Get Permissions and Role Membership
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security Who Can Actually Do What, at Every Level Sysadmin Members answers the single highest-stakes question: who has unrestricted access. These four scripts answer everything underneath that: explicit object and schema grants inside a database, explicit server-level grants and denies on logins, database…
Written by
-
Forcing Encrypted Connections in SQL Server Using Certificates
In the previous post, we looked at how to verify what protocol and encryption SQL Server is actually using at runtime. That answers the question: What is happening on the wire right now? This post answers a different one: How do I make sure every TCP connection is encrypted, every time? Forcing encryption in SQL…
Written by
-
Grant VIEW SERVER STATE in SQL Server
🚨Part of the SQL Server Errors series, the exact messages and what actually causes them.In: Security Msg 300 · Level 14 · State 1 The user does not have permission to perform this action. VIEW SERVER STATE permission was denied on object ‘server’, database ‘master’. Msg 300, Level 14, State 1 ⚡GRANT VIEW SERVER STATE…
Written by
-
Working with SQL Server Database Master Keys
SQL Server uses an encryption hierarchy to protect secrets such as credentials, asymmetric keys and certificates. At the database level, that hierarchy is anchored by the database master key (DMK). Because all other encrypted objects depend on it, losing access to the DMK can render those objects unusable. This post walks through how to: It also…
Written by
-
DBA Scripts: Get Database Mail and xp_cmdshell Configuration
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security xp_cmdshell lets any login with EXECUTE permission on it run arbitrary operating system commands from inside SQL Server. It’s genuinely useful for a handful of legacy automation tasks, and it’s also one of the first things a penetration tester checks for, because…
Written by
-
DBA Scripts: Get User Permissions Audit
🔧Part of the DBA-Tools Project, copy/paste SQL Server scripts and health checks.In: Security The One Login You Actually Care About Right Now Most permissions checks answer a broad question: who has sysadmin, what roles exist, what’s granted where. Useful for a periodic audit, but not what you reach for when someone asks “why does Sarah…
Written by
- sp_who vs sp_who2 vs sp_whoisactive in SQL Server
- The Evolution of SQL Server: Every Version from 1989 to 2025
- Cannot Execute As the Database Principal (Error 15517)
- Silent Failures: The SQL Server Problems That Never Raise an Error
- SQL Server Login Migration: What Gets Silently Left Behind
- CREATE USER WITHOUT LOGIN vs Contained Database Users
- Backups & Recovery (16)
- DBA Scripts (151)
- High Availability (HA) (12)
- Installation & Configuration (45)
- Maintenance (24)
- Migration & Upgrades (14)
- Monitoring (8)
- Performance Tuning (35)
- Security (Encryption & Permissions) (20)
- Storage & Capacity (14)
- T-SQL Fundamentals (11)
- Troubleshooting (55)
- Wait Types (235)