Can We Please Stop Sending Passwords Over the Wire?

While analyzing SQL Server's network protocol, I came across a weird fact: when a database client logs in using SQL Server authentication (as opposed to Windows authentication), it has to send the user's password to the server, in blatant violation of common security guidelines. At first, I couldn't believe it; SQL Server generally does an […]

Authentication

Stairway to SQL Server Security Level 2: Authentication

Authentication is the first step in letting a principal get access to an instance of SQL Server, essentially resolving the question, Who are you? In this stairway level you’ll learn about the basics of authentication and the authentication options available. This level covers logins and users and you’ll learn about the password policies that can help strengthen SQL Server authentication.

Removing the Linked Server 2 hop Limitation

This article talks about how you can get around the "Login Failed for user 'NT Authority\ANONYMOUS' LOGON" error when using linked servers and Windows authentication.

How to check SQL Server Authentication Mode using T-SQL and SSMS

Many times developers want to put logic into their code or SSIS/DTS package to check the SQL Server authentication mode. How can this be done programmatically?

Windows Group Membership Checker

A script to reveal which logins have access to your sql server via windows groups.

Find SQL Server Authentication Mode Configuration

Quick Method to find Configured???????????????????????? Authentication Mode

RE: bcp Problem

I finally got it figured out.  There was some malformed data hidden deep inside the data file.

RE: Sysprotects.columns field

Of course! I was reading the bitmask left-to-right instead of the other way round.Thanks a lot,Ben

RE: Remote user defind functions

Yes, in my exper. also... you need to...select * from dbo.MyFn('value1', NULL) --- at the very least Oh well, SQL's 1st time with UDFs, so I guess we get a lot of what we want, just not everything we would want.