Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Thursday, June 17, 2010

Double-hop on SQL Server

How to set delegation for SQL Server?

How to resolve an error like:

Msg 18456, Level 14, State 1, Line 1
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

It typically occurs when you use linked server – when you request from machine A something from machine B which then requests something from machine C.

Excellent text:

http://kendalvandyke.blogspot.com/2008/11/delegation-what-it-is-and-how-to-set-it.html

Monday, June 14, 2010

Domain Groups membership list?

How to check which Domain Groups are you member of?

> net user MyLogin /domain

List members of Domain Group with Command Prompt NET command

I often look for a way to list members of Active Directory/domain group using NET command from Command Prompt:

>net group MyGroup /domain

Saturday, April 17, 2010

Allow everybody to see metadata

Since SQL Server 2005, a user/DBA can see definition of only those objects that he has permission to. Earlier versions of SQL Server were much more liberal in that respect. If you prefer that type of behavior on you server, you can issue a following command:

grant view any definition to public

Now, everybody can investigate all objects in a current database.

This may be a way to allow developers to investigate a production database without giving them ability to change anything. (It is better to do this then to make them database owners.)

ShareThis