Clients sometimes forget to give me admin rights. IS_SRVROLEMEMBER(‘sysadmin’) checks if the current login is a Server Role Member: 1 means yes, 0 means no.
SQL SERVER – Fix : Error : Msg 4621, Level 16, State 10 : Permissions at the server scope can only be granted when the current database is master
Msg 4621 says permissions at the server scope can only be granted when the current database is master. Switch to master with USE master and grant again.
SQL SERVER – Disable Windows Authentication – Remove Windows Authentication Login Account
A reader asked how to disable Windows Authentication in SQL Server. The short answer: it can not be disabled, and it is the most secure way to log in.
Contained Databases and Contained Users
Understand contained users in SQL Server databases, how they travel with a database, and the security trade-offs of partial containment.
Securing Linked Servers
Securing linked servers requires explicit login mappings, limited RPC settings, remote privilege checks, and dependency ownership.
Granting VIEW SERVER STATE Without Handing Out sysadmin
Grant VIEW SERVER STATE or SQL Server 2022 performance permissions to a monitoring login, add job history access, and test its limits.
Renaming or Disabling the sa Login
Renaming or disabling the sa login requires a dependency inventory, tested alternate admin access, and monitoring after the change.