To deny drop permission for a table, deny ALTER on its schema, because DENY DELETE only stops row deletes. This post tests both on a demo database and shows what each deny blocks and what it leaves open.
Prevent Index Changes in SQL Server With a DDL Trigger
To prevent index changes in one database, create a DDL trigger on the index events that rolls back the statement and says why. This post tests the trigger, shows what it blocks, and lists the index changes that slip past it.
Unlock SQL Login Without Changing the Password
Unlock SQL login accounts without a new password: switch CHECK_POLICY off and on. See the lockout, the fix, and what to do when MUST_CHANGE blocks it.
Logon Storms: Protecting SQL Server From Connection Floods
Diagnose SQL Server logon storms, control connection growth, test a limited logon trigger, and preserve administrator recovery access.
SQL SERVER – Change Password at the First Login
MUST_CHANGE requires a SQL-authenticated login to change password at its first connection. Policy options and the client workflow must support it.
SQL SERVER – Find Untrusted Foreign Key
An Untrusted Foreign key has not validated all existing rows. A customer bulk-load history prompted this inventory.
SQL SERVER – Who Dropped Table? Part 2
A dropped table can leave transaction-log clues, but those clues are not a complete audit trail. My original investigation had limits.







