SqlServerKudos

Security

1
kudos

Kudos

Master SQL Chef series: Implementing Security features #sql #sql2k8r2cookbook

posted by

sa 138 days, 2 minutes ago

Master SQL Chef series: Implementing Security features #sql #sql2k8r2cookbook

Security is key aspect to restrict access to your data, any platform or database that stores information needs a robuts infrastructure to control the access. The process to access the data will need a secure process or setup the system as 'secure-by-default'. Windows Server 2008 operating system has several configurable features such as platform, architecture and access layer. Similarly SQL Server 2008 also consist similar configurable features such as services, architecture, database objects and...(read... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

| flag as spam

tags: Best Practices, cookbook, feature, Master Data Management, operating system, policy based framework, Security, SQL Server, windows server

1
kudos

Kudos

Master SQL Chef series: Designing automated administration #sql #sql2k8r2cookbook

published 137 days, 23 hours, 37 minutes ago posted by

sa 140 days, 12 minutes ago

Master SQL Chef series: Designing automated administration #sql #sql2k8r2cookbook

The administrative tasks such as managing backups, jobs, alerts and database maintenance activites are essential for every DBA. The tasks will be more complex and larger when the data platform is spread across the Enterprise, key task is to be able to automate the routine tasks and develop proactive maintenance to ensure that data availability and integrity is maintained without any interruption. The management of automated processes is a different topic and in order to accomplish part of the task...(rea... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: automated administration, Best Practices, builtin, cookbook, Jobs, policy based framework, schedule, Security, SQL Server, system

1
kudos

Kudos

SQL Server Performance series: Trace Flag 845 and Lock Pages in Memory

published 177 days, 2 hours, 24 minutes ago posted by

sa 180 days, 3 hours, 9 minutes ago

SQL Server Performance series: Trace Flag 845 and Lock Pages in Memory

A discussion about trace flags 845 lead to explain the information about the requirement and necessity in case of 32 bit and 64 bit environments. The Lock Pages in Memory has gained importance since version 2005 due to the fact that 32-bit and 64-bit environments are managed. As you may be aware it was only available in Enterprise and Developer editions, since CU4 for SQL Server 2005 SP3 and CU2 for SQL Server 2008 SP1 it is enabled as a trace flag 845 for Standard Edition environment too. Lock Pages...(... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: benchmarking, Best Practices, configuration, cumulative update, lock down, lock pages in memory, performance monitoring, Security, SQL Server, Version

1
kudos

Kudos

SSIS restart issues, message: application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

published 217 days, 6 hours, 48 minutes ago posted by

sa 225 days, 6 hours, 50 minutes ago

SSIS restart issues, message: application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

SQL Server Integration Services (SSIS) is an important service that is required to continue the ETL (extract transform load) tasks on your data platform. You may notice that since SQL Server 2005 version onwards the database maintenance plans will always use SSIS packages to perform the key maintenance activities. Though SSIS service is not imporant here but it is ideal to continue the key ETL activities using SSIS packages than TSQL methods. Just going back to basics running SSIS provides many capabilit... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: benchmarking, Best Practices, component services, error log, integration services, Security, SQL Server, SSIS

1
kudos

Kudos

SQL Server 2008 R2 installation and move system databases vows - error 5120, 17204, 5015 and 945

published 225 days, 7 hours, 20 minutes ago posted by

sa 233 days, 8 hours, 10 minutes ago

SQL Server 2008 R2 installation and move system databases vows - error 5120, 17204, 5015 and 945

SQL Server 2008 onwards the setup process has been so easy and straight-forward to follow, the installation part was easy and I hit the road-block when the system database were moved from the original location. The installtion will go thru the steps such as: review installation requirements, system configuration checks, and security considerations for a SQL Server installation. By using the SQL Server installation center we can proceed to run SQL Server Setup to install or upgrade to a later version....(... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: 5105, error log, Installation, model database, Security, SQL Server, system databases

1
kudos

Kudos

Cumulative Update Package1 for SQL Server 2008 R2 Service Pack 1 envrionmet

published 275 days, 11 hours, 40 minutes ago posted by

sa 280 days, 10 hours, 46 minutes ago

Cumulative Update Package1 for SQL Server 2008 R2 Service Pack 1 envrionmet

If you have applied the SQL Server 2008 R2 Service Pack1 then here is the news to test and apply Cumulative Update package 1 information. As per the KBA 2567714 : A supported cumulative update package is now available from Microsoft. However, it is intended to correct only the problems that are described in this article. Apply it only to systems that are experiencing these specific problems. This cumulative update package may receive additional testing. Therefore, if you are not severely affected...(read... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: cumulative update, downgrade, download, implementation, package, releases, Security, sp1, SQL Server

1
kudos

Kudos

SQL Server BI: secure the Analysis Services instance and few best practice gotchas #sql #sqlBI

published 301 days, 13 hours, 41 minutes ago posted by

sa 308 days, 13 hours, 59 minutes ago

SQL Server BI: secure the Analysis Services instance and few best practice gotchas #sql #sqlBI

When it comes to security the Business Intelligence systems are also key parts of your data platform. In terms of securing SQL Server Analysis Services instance means there are certain Analysis Services configuration properties that you can set using the Management Studio. Similar to the core relational engine SQL Server 2008 Analysis Services also provide the deployment and configuration options that can be tailored based on each application security requirements. When it comes to Security the Policy-ba... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: Analysis Services, Best Practices, browser service, DBA, ebook, port, Security, service account, SQL Server, SSAS

1
kudos

Kudos

SQL Server service account permissions and gotchas #sql #bpa #sqlservice

published 369 days, 18 hours, 30 minutes ago posted by

sa 376 days, 16 hours, 51 minutes ago

SQL Server service account permissions and gotchas #sql #bpa #sqlservice

The number of services related to SQL Server has been doubled since SQL Server 2005 is released and 2008 R2 version has got few more to watch. The various services that are required/related to SQL Server are as follow and each of them will run as a seperate service that require relevant permissions to manage authentication of SQL Server operations with Windows operating system. The services and components will vary if you decide to install selective services, SQL Server seteup will allow the following...... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: best practice, DBA, Monitoring, Security, server restart, service account, SQL Server, user right, windows nt

1
kudos

Kudos

SQL Server DBA Manageability practices: Central Management Servers - how best you want to utilize them?

published 376 days, 19 hours, 1 minute ago posted by

sa 385 days, 19 hours, 41 minutes ago

SQL Server DBA Manageability practices: Central Management Servers - how best you want to utilize them?

SQL Server 2008 version added a new face within SQL Server Management Studio that can help users to administer/manage/execute queries against multiple servers by designating Central Management Servers (CMS) and creating server groups. This means as an user you need not to enter login/password details whenever connecting to a server instance that is registered under CMS, as it maintains the server groups which maintain such connection information for registered servers. Not just executing multiple...(read... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: beginners, Best Practices, central management server, DBA, Security, SQL Server, System Catalog, ucp

1
kudos

Kudos

Solution - Login failed for user x. Reason Token based server access validation failed and error - 18456

published 468 days, 24 minutes ago posted by

sa 477 days, 3 hours, 3 minutes ago

Solution - Login failed for user x. Reason Token based server access validation failed and error - 18456

Had a very bizarre situation yesterday where a local machine account couldn’t access SQL Server and was getting Login failed for user (more)

category: News | clicked: 1 | comment | | source: sqlblogcasts.com

tags: Security, Tips and Tricks

1
kudos

Kudos

SQL Server agent: Property pagersendsubjectonly is not available for alert system this property may not exist for this object or may not be retrievable due to insufficient access rights.

published 496 days, 2 hours, 24 minutes ago posted by

sa 504 days, 2 hours, 47 minutes ago

SQL Server agent: Property pagersendsubjectonly is not available for alert system this property may not exist for this object or may not be retrievable due to insufficient access rights.

Do you see this error in your environment? Is it a frequently occuring issue? In the recent time in a 64 bit environment we started to get this alert generated and DBAs complaining sometimes are unable to view the SQLAgent jobs on that remote server. If we observe the error text it clearly states " ....this property may not exist for this object or may not be retrievable due to insufficient access rights ". The first part is property may not exist for this object which means a tools problem and to...(rea... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: access, permissions, property, rights, Security, SQL Server, SQL Server Agent, SSMS

2
kudos

Kudos

SQL Server discovery: How to find edition of SQL Server without connecting to that instance?

published 502 days, 2 hours, 42 minutes ago posted by

sa 511 days, 4 hours, 26 minutes ago

SQL Server discovery: How to find edition of SQL Server without connecting to that instance?

This is an interesting question in the recent times that I have seen in the forums, that how to find such information even without connecting to that SQL instance. There are plenty of ways to get information about SQL instance name using OSQL -L or find about odbc32.dll to get list of SQL names if they are registered. Also the local instance is resolved by registry entry and remote instances are resolved by UDP broadcast (port 1434), using sqlbrowser -c can help some extent to obtain the information....(... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: discovery report, installallation, instance, port, Security, SQL Server, SSMS, Tools

2
kudos

Kudos

SQL Server 2008 R2 installation and move system databases vows - error 5120, 17204, 5015 and 945

published 508 days, 3 hours, 12 minutes ago posted by

sa 517 days, 4 hours, 53 minutes ago

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: 5105, error log, Installation, model database, Security, SQL Server, system databases

2
kudos

Kudos

Error 18456: Login failed for user. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors.

published 523 days, 4 hours, 17 minutes ago posted by

sa 532 days, 5 hours, 58 minutes ago

Error 18456: Login failed for user. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors.

This is a new error in this environment when I tried to logon, SQL Server 2008 SP1 Standard Edition 64-bit running on Windows Server 2008 R2. The complete text of the error is: Error: 18456, Severity: 14, State: 11 Login failed for user 'DOMAIN\user'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors . But there were no issues to access the database information on this instance, other than this annoying error reported via monitoring software...(re... (more)

category: News | clicked: 2 | comment | | source: sqlserver-qa.net

tags: 18456, DBA, error, Information, Login, new features, Security, severity, SQL Server, SSMS, UAC, Windows Server 2008

1
kudos

Kudos

Restricting logons during certain hours for certain users

published 528 days, 4 hours, 34 minutes ago posted by

sa 537 days, 6 hours, 9 minutes ago

Restricting logons during certain hours for certain users

Following a an email in a DL I decided to look at implementing a logon restriction system to prevent users from logging on at certain ties of the day. The poster had a solution but wanted to add auditing. I immediately thought of the My post on logging...(read more) (more)

category: News | clicked: 0 | comment | | source: sqlblogcasts.com

tags: Logon Triggers, Security, SQL Server 2005, SQL Server 2008, SQL Server 2008 R2, SQL Server 2011

1
kudos

Kudos

The server principal '\User' already exists. But it doesn’t

published 543 days, 5 hours, 39 minutes ago posted by

sa 552 days, 8 hours, 20 minutes ago

$The server principal '\User' already exists. But it doesn’t$

Interesting little situation occurred today, the person I was working with was trying to add a login to a server and was getting the following error. “The server principal ' (more)

category: News | clicked: 2 | comment | | source: sqlblogcasts.com

tags: Security, Tips and Tricks

1
kudos

Kudos

The job step requires a proxy account, however proxy matching is disabled on the target server

published 586 days, 9 hours, 39 minutes ago posted by

sa 595 days, 11 hours, 34 minutes ago

The job step requires a proxy account, however proxy matching is disabled on the target server

From the error text it is clear that Proxy settings are not matching between the servers, in a multi-server environment it is essential to configure the proxy server settings correctly to ensure no errors reported while executing the jobs. From SQL Server 2005 onwards the security around SQLAgent service has been changed in terms of configure a user to create or execute the schedule jobs, you must first add an existing SQL Server login or msdb role to any of the SQL Server Agent fixed database roles:...(... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: DBA, Distributed Transactions, multiple, proxy, Security, setup, SQL Server, SQL Server Agent, ssis package, target server

1
kudos

Kudos

Vulnerability in ASP.NET Could Allow Information Disclosure:: Microsoft Security Advisory (2416728)

published 601 days, 10 hours, 41 minutes ago posted by

sa 610 days, 11 hours, 36 minutes ago

Vulnerability in ASP.NET Could Allow Information Disclosure:: Microsoft Security Advisory (2416728)

Here is the update and workaround about the vulnerability in ASP.NET: Microsoft is investigating a new public report of a vulnerability in ASP.NET. An attacker who exploited this vulnerability could view data, such as the View State, which was encrypted by the target server, or read data from files on the target server, such as web.config. This would allow the attacker to tamper with the contents of the data. By sending back the altered contents to an affected server, the attacker could observe the...(re... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: asp.net, dotnet, mapp, microsoft, patch, Programming Language, Security, SQL Server, vulnerability

2
kudos

Kudos

Microsoft Security Bulletin Summary for September 2010

published 607 days, 11 hours, 6 minutes ago posted by

sa 616 days, 12 hours, 1 minute ago

******************************************************************** Microsoft Security Bulletin Summary for September 2010 Issued: September 14, 2010 ******************************************************************** This bulletin summary lists security bulletins released for September 2010. The full version of the Microsoft Security Bulletin Summary for September 2010 can be found at http://www.microsoft.com/technet/security/bulletin/ms10-sep.mspx . With the release of the bulletins for September...(... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: bulletin, microsoft, Security, server services, windows

1
kudos

Kudos

SQL Server 2008 R2 Reporting Services configuration: ERROR: Missing or Invalid ExtendedProtectionLevel setting

published 623 days, 12 hours, 13 minutes ago posted by

sa 632 days, 14 hours, 9 minutes ago

SQL Server 2008 R2 Reporting Services configuration: ERROR: Missing or Invalid ExtendedProtectionLevel setting

The above error is presented on the instance which has got SQL Server 2008 R2 Reporting Services and used Windows Authentication to connect. The newest additon to SQL Server 2008 R2 architecture is Extended Protection authentication , which is a set of enhancements to Windows Authentication. A brief referral on Technet reveals that the main authentication enhancements that are part of extended protection are service binding and channel binding. Channel binding uses a channel binding token (CBT),...(read ... (more)

category: News | clicked: 0 | comment | | source: sqlserver-qa.net

tags: config file, extended protection, report viewer, Security, SQL Server, SQL Server 2008 R2, SSRS, tags, web service

Welcome!

Security

Master SQL Chef series: Implementing Security features #sql #sql2k8r2cookbook

Master SQL Chef series: Designing automated administration #sql #sql2k8r2cookbook

SQL Server Performance series: Trace Flag 845 and Lock Pages in Memory

SSIS restart issues, message: application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

SQL Server 2008 R2 installation and move system databases vows - error 5120, 17204, 5015 and 945

Cumulative Update Package1 for SQL Server 2008 R2 Service Pack 1 envrionmet

SQL Server BI: secure the Analysis Services instance and few best practice gotchas #sql #sqlBI

SQL Server service account permissions and gotchas #sql #bpa #sqlservice

SQL Server DBA Manageability practices: Central Management Servers - how best you want to utilize them?

Solution - Login failed for user x. Reason Token based server access validation failed and error - 18456

SQL Server agent: Property pagersendsubjectonly is not available for alert system this property may not exist for this object or may not be retrievable due to insufficient access rights.

SQL Server discovery: How to find edition of SQL Server without connecting to that instance?

SQL Server 2008 R2 installation and move system databases vows - error 5120, 17204, 5015 and 945

Error 18456: Login failed for user. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors.

Restricting logons during certain hours for certain users

The server principal '\User' already exists. But it doesn’t

The job step requires a proxy account, however proxy matching is disabled on the target server

Vulnerability in ASP.NET Could Allow Information Disclosure:: Microsoft Security Advisory (2416728)

Microsoft Security Bulletin Summary for September 2010

SQL Server 2008 R2 Reporting Services configuration: ERROR: Missing or Invalid ExtendedProtectionLevel setting

Open ID Login

Standard Login

Forgot Password?

Sign up