---

Filter by type:

• All
• Blog Posts

How to Test Trace Flag 3625

• by Patrick

• Everyday SQL

Recently, one of my customers considered enabling Trace Flag 3625 on one of their SQL Servers, but they wanted a way to quickly test its functionality beforehand. For those...

2023-12-12

Get Certificate Details for SQL Encryption In-Transit Using PowerShell – UPDATED

• by Patrick

• Everyday SQL

In a previous blog post, I showed you how to use PowerShell to retrieve the details of the certificate being used for encryption-in-transit, aka TLS encryption. I have received...

2023-11-14

Create Service Principal Names Along with a Managed Service Account

• by Patrick

• Everyday SQL

In a few previous articles, I have talked a lot about Managed Service Accounts (MSA) and Service Principal Names (SPN) and given examples of managing the separately. As a...

2022-11-01

How to Logon Interactively with a Group Managed Service Account

• by Patrick

• Everyday SQL

Managed Service Accounts (MSA) are intended to run as a service and not to be used by an end user to logon interactively; however, there are some cases where...

2022-03-15

Setup Resource-Based Kerberos Constrained Delegation for Group Managed Service Accounts

• by Patrick

• Everyday SQL

In my previous post, I discussed how to setup Kerberos constrained delegation and a limitation of using that method. This post will discuss how we can used resource-based Kerberos...

2022-03-01

2 reads

Is There a Limit to msDS-AllowedToDelegateTo

• by Patrick

• Everyday SQL

For those of you that need to setup Kerberos constrained delegation for Group Managed Service Accounts, you will likely get more familiar with msDS-AllowedToDelegateTo. This attribute stores a list...

2022-02-15

15 reads

Setup Kerberos Constrained Delegation for Group Managed Service Accounts

• by Patrick

• Everyday SQL

Kerberos delegation is not a new concept in Active Directory; however, setting it up for Group Managed Service Accounts (gMSA) can be a bit confusing. Unlike normal domain accounts,...

2022-02-01

Managed Service Account Naming Convention

• by Patrick

• Everyday SQL

A while back I had to help a customer update their naming standard for their Managed Service Accounts, so I thought I would share some of those details. The...

2022-01-18

3 reads

Get Certificate Details for SQL Encryption In-Transit Using PowerShell

• by Patrick

• Everyday SQL

In my opinion, all customers should be encrypting connections to their SQL Servers to secure data in-transit, but that’s a discussion for another day. Today, I wanted to discuss...

2022-01-04

8 reads

Finding the NTFS Allocation Unit Size for Mount Points

• by Patrick

• Everyday SQL

The 64Kb Allocation Unit size is one of the easiest SQL Server best practice items to complete during your new builds, but from time to time, I still see...

2021-12-07

7 reads

Filter by type:

• All
• Blog Posts