Choose GDR or CU for SQL Server by understanding security and cumulative branches, checking the exact build, and testing a branch change.
NT SERVICE Accounts in sysadmin: What They Are For
A security scan wants those service logins gone. Here is how to see what each one is for before you click Delete.
SQL SERVER – Windows File/Folder and Share Permissions – Notes from the Field #029
DBAs often skip Windows security because they are not Windows experts. Brian Kelley explains file, folder and share permissions and why teamwork matters.
SQL SERVER – Say No to DB Data Roles – SQL Security – Notes from the Field #022
Brian Kelley explains why he avoids the fixed DB data roles db_datareader and db_datawriter, and how they can compromise your server security.
Data Governance: Catalog, Lineage and Data Quality
Data Governance is how you know what data you have, where it came from, who can see it and whether it is right. This post covers the catalog, lineage, access and data quality, with T-SQL checks you can run.
TRUNCATE Permission: Letting a User Empty One Table
Your loader needs to empty a staging table, not redesign it. Here is a small procedure that gives it exactly that.
SQL SERVER – Auditors, Passwords and Exceptions – Notes from the Field #010
Weak passwords are like a key under the door mat. Brian Kelley explains what auditors look for around passwords and exceptions in database security.