MUST_CHANGE requires a SQL-authenticated login to change password at its first connection. Policy options and the client workflow must support it.
CHECK_POLICY and CHECK_EXPIRATION for SQL Logins
Audit CHECK_POLICY and password expiration for SQL logins, inspect LOGINPROPERTY evidence, and plan safe service-account exceptions.
SQL SERVER – Creating System Admin (SA) Login With Empty Password – Bad Practice
An empty password on sa is a serious security failure. I stopped an e-commerce consultation after noticing passwordless administrator sign-ins.
List All Jobs With Owners in SQL Server Agent
To list all jobs with owners, read the job table in msdb and resolve each owner with a join that keeps jobs without a login. This post builds four demo jobs, shows how a common query hides one of them, and reassigns jobs safely. It ends with a cleanup script.
Can Admin Rename SA Account in SQL Server? – Interview Question of the Week #256
Question: Can Admin Rename SA Account in SQL Server?
Answer: Yes, of course. The syntax for to rename SA account is very simple:
Granting Read Access to One Schema With GRANT SELECT ON SCHEMA
Use GRANT SELECT ON SCHEMA for focused read access, test a loginless user, and check ownership chains and table-level DENY behavior.
SQL SERVER – Public Role Permissions and Effective Security Risk
Every database user belongs to Public and cannot be removed from that role. A reader asked whether the role should be eliminated.