Tag: Security

  • DBA Scripts: Get Linked Servers

    Part of the DBA-Tools Project. Four Questions, One Topic: What’s Linked to This Server Linked servers are the kind of configuration that gets set up once, for one integration, and then forgotten until a migration or an incident forces someone to ask what’s actually connected to this instance and how. There are four separate questions…

    Written by

    Peter Whyte

  • DBA Scripts: Get Orphaned Users

    Part of the DBA-Tools Project. An orphaned user is a database user whose SID no longer matches any server login, usually left behind after a database restore or attach on a different server, a migration, or a login that was dropped without cleaning up the database users mapped to it. The user still exists in…

    Written by

    Peter Whyte

  • DBA Scripts: Security

    Part of the DBA-Tools Project. Who Can Do What, What’s Actually Happening, and What’s Silently Missing Security on an inherited SQL Server instance breaks down into three genuinely different questions, and a single “run a security scan” checklist tends to blur them together. Who has privileged access, right now? What’s actually happening at the login…

    Written by

    Peter Whyte

  • DBA Scripts: Get Audit Specifications, DDL Triggers, and Proxy Credentials

    Part of the DBA-Tools Project. Three Kinds of Infrastructure Most Servers Never Had in the First Place Some security infrastructure isn’t misconfigured, it just doesn’t exist. Get-AuditSpecifications checks for SQL Server Audit, the formal compliance mechanism for SOX/GDPR/PCI-DSS, and most inherited servers have none configured at all. Get-DdlTriggers finds server-level DDL triggers, a hidden dependency…

    Written by

    Peter Whyte

  • DBA Scripts: Get Certificates, Keys, and TDE Status

    Part of the DBA-Tools Project. The Encryption Layer Nobody Monitors Until It Expires Certificates created for TDE, backup encryption, or an Availability Group encrypted endpoint get created once and then quietly forgotten. An expired certificate doesn’t break TDE in memory on the server that has it, but it prevents restoring that TDE-encrypted database anywhere else,…

    Written by

    Peter Whyte

  • DBA Scripts: Get Login Security Audit

    Part of the DBA-Tools Project. What’s Actually Happening at the Login Level, Not Just Who’s Allowed Permissions and Role Membership covers who can do what. These three scripts cover something different: what’s actually happening at the login layer right now. Get-FailedLoginSummary surfaces brute-force patterns and locked accounts from the error log. Get-LoginLastActivity shows current session…

    Written by

    Peter Whyte

  • DBA Scripts: Get Permissions and Role Membership

    Part of the DBA-Tools Project. Who Can Actually Do What, at Every Level Sysadmin Members answers the single highest-stakes question: who has unrestricted access. These four scripts answer everything underneath that: explicit object and schema grants inside a database, explicit server-level grants and denies on logins, database role memberships across every online database, and membership…

    Written by

    Peter Whyte

Blog Categories

Latest Posts

Blog Tags

Access (3) Always On Availability Groups (4) Auditing (7) Backups (4) Blocking Locking (6) Database Backups & Recovery (8) Database Backups and Recovery (5) Database Maintenance (7) DBA Tools (28) Disk Space (5) Error Log (2) Extended Events (7) Features (6) High Availability (6) Indexes (5) Instance (3) Inventory (6) Jobs (3) Migration (6) Monitoring (24) Performance (19) Performance Troubleshooting (9) PowerShell (4) Queries (3) Query Behaviour (5) Security (7) SQL Agent (3) SQL Scripts (21) SQL Server Administration (10) SQL Server Configuration (7) SQL Server Errors (5) SQL Server High Availability (4) SQL Server Internals (3) SQL Server Management Studio (SSMS) (6) SQL Server Monitoring (7) SQL Server Networking (9) SQL Server Security (9) SQL Server Versions (2) Storage and Capacity (9) T-SQL (9) Temp DB (3) Tracing (7) Transaction Logs (5) Troubleshooting (14) Windows Server (4)