Browse by Tags

• 1433
• 3gb
• application
• applications
• article
• attacks
• authentication
• awe
• backups
• baseline
• benchmarking
• blocking
• blog
• blogs
• bol
• books online
• bpa
• check_expiration
• check_policy
• computing
• dashboard
• databases
• dmv
• downloads
• dynamic
• environment
• feature
• forums
• guidance
• hotfix
• index plan
• injection
• lock down
• logins
• memory
• microsoft
• monitoring
• newsgroups
• operating system
• package
• pae
• password
• performance
• performance monitoring
• policies
• policy
• port
• procedure
• public
• query
• reference
• sa
• sa password
• server state
• service pack
• settings
• sql authentication
• sql server
• sql server central
• store
• stored procedure
• symmettric keys
• tools
• trustworthy
• undocumented
• users
• view
• vulnerability
• windows
• windows authentication

Microsoft Security Bulletin Summary for July 2008 - what is it now?
09 July 08 01:07 AM | SQL Master | 2 Comments   

I believe it has been a while that we have seen the security hotfix from Microsoft Security team on SQL Server (alone). The latest security bulletin has announced important security patches that are related to SQL Server in addition to Windows operating Read More...

Filed under: sql server, security, hotfix, best practice, service pack, guidance, vulnerability

SQL Injection attacks - don't forget to visit guidance information from Microsoft
31 May 08 01:59 PM | SQL Master | 4 Comments   

One of the biggest threats in IT industry & Database world is unprecedented attacks aka most commonly termed as 'SQL injection'. There is no doubt that biggest database vendors, one of them as Microsoft so far providing recommendations regarding security-related Read More...

Filed under: sql server, security, authentication, best practice, blogs, injection, reference, attacks

SQL Server 2005 Login Security - CHECK_POLICY and CHECK_EXPIRATION setting, how it affects the password policy?
30 April 08 01:53 AM | SQL Master | 2 Comments   

Adding password complexity and password expiration to SQL Server logins is one of best feature I quote for SQL Server version 2005 onwards, similarly such password complexity policies are designed to deter brute force attacks by increasing the number Read More...

Filed under: sql server, microsoft, security, best practice, settings, logins, password, check_expiration, check_policy, computing, policies, trustworthy, feature

SQL Server Lockdown - Step by Step procedure
13 February 08 01:31 AM | SQL Master | 4 Comments   

Do you want to lockdown your SQL Server environment? Hope you dont'! Though it is not a good practice or recommendation to perform, but will atleast prove how far your SQL Server environment has securit compliance as per the industry best practices. Before Read More...

Filed under: sql server, microsoft, security, sa, best practice, downloads, tools, lock down, bpa, article, procedure

SQL Server Performance - what it takes for a newbie DBA in resolving performance issues?
05 February 08 01:57 AM | SQL Master | 6 Comments   

SQL Server Performance Tuning, sounds familiar on a DBA perspective and though it sounds like an easy words but when you start analyzing the problem it is far deeper inside. When you refer to the web resources such as forums/newsgroups then a common question Read More...

Filed under: performance, sql server, security, query, blocking, best practice, blogs, index plan, newsgroups, sql server central, forums

Unattended installation of application on multiple sites by using sa password with a symmetric key, is it possible in SQL Server?
29 January 08 12:36 AM | SQL Master | 2 Comments   

The newest ranch of Security - trust worthy features in SQL Server 2005 usage of symmetric keys has an important role. Always the document suggests to use Windows Authentication of security purpose and better control of user/security management, but when Read More...

Filed under: sql server, security, application, best practice, sql authentication, store, sa password, windows authentication, symmettric keys

SQL Server logins - enforce Password Expiration and policies
07 January 08 12:11 PM | SQL Master | 2 Comments   

Here is a quick snippet on enabling a SQL login to password expiration and password policies as per the Windows server: Open the SQL Server 2005 Management Studio. In the left pane, go to the desired server and navigate to the Security folder and expand Read More...

Filed under: sql server, security, windows, authentication, best practice, logins, bol, sql authentication, books online, password, policy

SQL Server 2005 memory configuration gotchas
28 December 07 03:44 AM | SQL Master | 5 Comments   

This may be last post in Performance Tuning & Security blog section here for this year!! Most of this year in the forums & newsgroups I have seen a common question asking about memory configuration within SQL Server 2005. As you may be aware that Read More...

Filed under: performance, sql server, security, memory, pae, awe, best practice, 3gb, performance monitoring, benchmarking, dynamic, settings, applications

SQL Server undocumented stored procedure to get information on login mapping name
24 December 07 05:55 AM | SQL Master | 2 Comments   

They say better not to use UNDOCUMENTED stored procedures, which is true in the aspect when any Service Pack or version is released that may not be included and your task might have issues in working out. Similar to this I was going through various methods Read More...

Filed under: sql server, security, stored procedure, best practice, server state, undocumented

SQL Server 2005: Deny Server-Level Dynamic Management Views to public group
21 December 07 06:47 AM | SQL Master | 2 Comments   

As you are aware DMV - Dynamic management views are very good to provide server-level information and some of them with detailed information on the execution environment of the database engine. Just to introduce about DMVs, there are two types of dynamic Read More...

Filed under: performance, sql server, security, package, dmv, users, view, best practice, monitoring, public, server state

SQL Server performance monitoring requirement and specifications, heard about baseline and benchmarking?
19 December 07 05:06 AM | SQL Master | 3 Comments   

How do you define the terms "Performance Monitoring"? What is your baseline & benchmarks? Have you ever used PERFMON (SYSMON) & PROFILER for serious performance issues within your SQL Server environment? The answer may be not 'yes' for all the Read More...

Filed under: performance, sql server, microsoft, security, blog, databases, dashboard, best practice, backups, monitoring, baseline, performance monitoring, downloads, environment, benchmarking

Changing ports on production SQL Server - things to watch for 1433
07 December 07 11:29 AM | SQL Master | 2 Comments   

What is your criteria on assigning ports to SQL Server? Are you leaving them to default 1433? Is your SQL Server is exposed to Internet or any external sources where there is a chance to produce mass attach or run code injection? Every DBA should give Read More...

Filed under: sql server, microsoft, security, databases, best practice, 1433, operating system, port