Investigate a SQL Server compromise by preserving evidence and checking logins, startup procedures, Agent jobs, risky features, and changed objects.
SQL SERVER – Check if Current Login is Part of Server Role Member
Clients sometimes forget to give me admin rights. IS_SRVROLEMEMBER(‘sysadmin’) checks if the current login is a Server Role Member: 1 means yes, 0 means no.
SQL SERVER – Fix : Error : Msg 4621, Level 16, State 10 : Permissions at the server scope can only be granted when the current database is master
Msg 4621 says permissions at the server scope can only be granted when the current database is master. Switch to master with USE master and grant again.
SQL SERVER – Disable Windows Authentication – Remove Windows Authentication Login Account
A reader asked how to disable Windows Authentication in SQL Server. The short answer: it can not be disabled, and it is the most secure way to log in.
Contained Databases and Contained Users
Understand contained users in SQL Server databases, how they travel with a database, and the security trade-offs of partial containment.
Securing Linked Servers
Securing linked servers requires explicit login mappings, limited RPC settings, remote privilege checks, and dependency ownership.
Granting VIEW SERVER STATE Without Handing Out sysadmin
Grant VIEW SERVER STATE or SQL Server 2022 performance permissions to a monitoring login, add job history access, and test its limits.