Support needs phone numbers but not salaries. Here is how to unmask one column, and what that permission does not do.
Auditing WITH GRANT OPTION: Who Can Hand Out Permissions
Audit WITH GRANT OPTION at database and server scope, trace delegated permissions, and remove delegation with a reviewed CASCADE plan.
Masked Values: What Dynamic Data Masking Does Not Hide
A masked column shows zeros, but a user with SELECT can still filter, sort and guess the real values. Here is the proof and the fix.
Safe Dynamic SQL With sp_executesql and QUOTENAME
Write safe dynamic SQL with typed value parameters, validated object names, and allowed sort columns, then test hostile input.
Warning Before SQL Login Passwords Expire With DaysUntilExpiration
A Friday-night login failure is avoidable. One small query warns you weeks ahead, if somebody owns the warning.
Regaining sysadmin Access When Nobody Can Log In
Regaining sysadmin access starts with single-user SQL Server, a local sqlcmd connection, and a controlled Windows admin group.
Restoring a TDE Protected Database on Another Server
Restore a TDE protected database on another SQL Server by moving its certificate and private key, then verify encryption state.