Browse by Tags

Microsoft Security Bulletin Summary for July 2008 - what is it now?

Published 9 July 8 3:7 AM | SSQA.net

I believe it has been a while that we have seen the security hotfix from Microsoft Security team on SQL Server (alone). The latest security bulletin has announced important security patches that are related to SQL Server in addition to Windows operating...

Filed under: sql server, security, hotfix, service pack, best practice, vulnerability, guidance

SQL Injection attacks - don't forget to visit guidance information from Microsoft

Published 31 May 8 3:59 PM | SSQA.net

One of the biggest threats in IT industry & Database world is unprecedented attacks aka most commonly termed as 'SQL injection'. There is no doubt that biggest database vendors, one of them as Microsoft so far providing recommendations regarding...

Filed under: sql server, blogs, security, best practice, injection, authentication, attacks, reference

SQL Server 2005 Login Security - CHECK_POLICY and CHECK_EXPIRATION setting, how it affects the password policy?

Published 30 April 8 3:53 AM | SSQA.net

Adding password complexity and password expiration to SQL Server logins is one of best feature I quote for SQL Server version 2005 onwards, similarly such password complexity policies are designed to deter brute force attacks by increasing the number...

Filed under: sql server, microsoft, security, feature, password, best practice, trustworthy, computing, logins, policies, settings, check_policy, check_expiration

SQL Server Lockdown - Step by Step procedure

Published 13 February 8 2:31 AM | SSQA.net

Do you want to lockdown your SQL Server environment? Hope you dont'! Though it is not a good practice or recommendation to perform, but will atleast prove how far your SQL Server environment has securit compliance as per the industry best practices...

Filed under: sql server, microsoft, security, tools, article, sa, procedure, best practice, downloads, bpa, lock down

SQL Server Performance - what it takes for a newbie DBA in resolving performance issues?

Published 5 February 8 2:57 AM | SSQA.net

SQL Server Performance Tuning, sounds familiar on a DBA perspective and though it sounds like an easy words but when you start analyzing the problem it is far deeper inside. When you refer to the web resources such as forums/newsgroups then a common question...

Filed under: sql server, performance, blogs, blocking, security, query, best practice, index plan, sql server central, newsgroups, forums

Unattended installation of application on multiple sites by using sa password with a symmetric key, is it possible in SQL Server?

Published 29 January 8 1:36 AM | SSQA.net

The newest ranch of Security - trust worthy features in SQL Server 2005 usage of symmetric keys has an important role. Always the document suggests to use Windows Authentication of security purpose and better control of user/security management, but when...

Filed under: application, sql server, security, best practice, sql authentication, sa password, symmettric keys, store, windows authentication

SQL Server logins - enforce Password Expiration and policies

Published 7 January 8 1:11 PM | SSQA.net

Here is a quick snippet on enabling a SQL login to password expiration and password policies as per the Windows server: Open the SQL Server 2005 Management Studio. In the left pane, go to the desired server and navigate to the Security folder and expand...

Filed under: sql server, security, windows, BOL, password, best practice, authentication, books online, policy, logins, sql authentication

SQL Server 2005 memory configuration gotchas

Published 28 December 7 4:44 AM | SSQA.net

This may be last post in Performance Tuning & Security blog section here for this year!! Most of this year in the forums & newsgroups I have seen a common question asking about memory configuration within SQL Server 2005. As you may be aware that...

Filed under: sql server, performance, memory, security, applications, best practice, awe, pae, dynamic, 3gb, benchmarking, performance monitoring, settings

SQL Server undocumented stored procedure to get information on login mapping name

Published 24 December 7 6:55 AM | SSQA.net

They say better not to use UNDOCUMENTED stored procedures, which is true in the aspect when any Service Pack or version is released that may not be included and your task might have issues in working out. Similar to this I was going through various methods...

Filed under: sql server, security, stored procedure, best practice, server state, undocumented

SQL Server 2005: Deny Server-Level Dynamic Management Views to public group

Published 21 December 7 7:47 AM | SSQA.net

As you are aware DMV - Dynamic management views are very good to provide server-level information and some of them with detailed information on the execution environment of the database engine. Just to introduce about DMVs, there are two types of dynamic...

Filed under: sql server, package, performance, security, dmv, users, view, best practice, public, monitoring, server state

SQL Server performance monitoring requirement and specifications, heard about baseline and benchmarking?

Published 19 December 7 6:6 AM | SSQA.net

How do you define the terms "Performance Monitoring"? What is your baseline & benchmarks? Have you ever used PERFMON (SYSMON) & PROFILER for serious performance issues within your SQL Server environment? The answer may be not 'yes'...

Filed under: dashboard, sql server, performance, databases, microsoft, security, blog, environment, best practice, backups, monitoring, baseline, benchmarking, downloads, performance monitoring

Keep Everything Clear of the Doors - get safe online

Published 14 December 7 1:52 AM | SSQA.net

Security, whether it is for your home or systems you have to be very careful! Ed Gibson, Chief Cyber Security Advisor from Microsoft has articulated very nice article that will talk more about these aspects, we have had a brief meeting with Ed when I...

Filed under: sql server, microsoft, security, article, best practice, hardware, author, holidays

Changing ports on production SQL Server - things to watch for 1433

Published 7 December 7 12:29 PM | SSQA.net

What is your criteria on assigning ports to SQL Server? Are you leaving them to default 1433? Is your SQL Server is exposed to Internet or any external sources where there is a chance to produce mass attach or run code injection? Every DBA should give...

Filed under: sql server, databases, microsoft, security, best practice, port, 1433, operating system