Brian Kelley

Brian Kelley is an author, columnist, and Microsoft SQL Server MVP focusing primarily on SQL Server security. He is a contributing author for How to Cheat at Securing SQL Server 2005 (Syngress), Professional SQL Server 2008 Administration (Wrox), and Introduction to SQL Server (Texas Publishing). Brian currently serves as an infrastructure and security architect. He has also served as a senior Microsoft SQL Server DBA, database architect, developer, and incident response team lead.

Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology

All authors

Excel Malformed File Vulnerability - Remote Code Execution

by Brian Kelley

Databases – Infrastructure – Security

Today, Microsoft release a security advisory about a new vulnerability in Microsoft Excel. This one affects both PCs and Macs....

2009-02-24

1,796 reads

Detecting When a Login Has Implicit Access to a Database

by Brian Kelley

Databases – Infrastructure – Security

Yesterday I blogged about how to figure out what database principals corresponded to what server principals. The key is to...

2009-02-23

1,848 reads

New Video Appearing on Front Page of JumpStart TV

by Brian Kelley

Databases – Infrastructure – Security

All of the videos I've done are up under my profile. However, the video for The difference between GRANT, DENY...

2009-02-23

1,490 reads

Mapping Database Principals to Server Principals

by Brian Kelley

Databases – Infrastructure – Security

A question on the forum asked how to find all the database mappings for a particular login. If you're on SQL...

2009-02-22

9,478 reads

Looking Forward to Getting My Kindle 2

by Brian Kelley

Databases – Infrastructure – Security

When the Kindle 2 was first announced, I debated about whether or not to get it. Then I realized I...

2009-02-21

1,365 reads

Adobe Acrobat/Reader 0day - Disable JavaScript

by Brian Kelley

Databases – Infrastructure – Security

There is an active attack in the wild for the newly announced Adobe Acrobat and Adobe Reader vulnerability. While the...

2009-02-20

2,060 reads

You Must Trust Someone

by Brian Kelley

Databases – Infrastructure – Security

After some recent talks with security folks and auditors, one of the things I have had a hard time getting across...

2009-02-20

3,057 reads

You Must Trust Your DBAs

by Brian Kelley

Databases – Infrastructure – Security

This is a follow-on post to You Must Trust Someone. My point in that post was to establish that being...

2009-02-20

1,939 reads

Another Reason to Avoid Cross-Database Ownership Chaining

by Brian Kelley

SQLServerCentral.com

Blogs

This past weekend we were moving database files around because we added new LUNs to an existing production cluster. We went at the old tried and true way, we detached the databases, moved the files, and re-attached the databases. That seemed to work well...

★ ★ ★ ★ ★ ★ ★ ★ ★ ★

You rated this post out of 5. Change rating

2009-02-20

2,133 reads

Discuss

The Limited Usefulness of Encrypting File System (EFS) and Transparent Data Encryption (TDE)

by Brian Kelley

Databases – Infrastructure – Security

This is something that hit me as I was presenting to the Charlotte SQL Server User Group last night.
Back...

2009-02-18

4,086 reads

All authors

Brian Kelley

Excel Malformed File Vulnerability - Remote Code Execution

Detecting When a Login Has Implicit Access to a Database

New Video Appearing on Front Page of JumpStart TV

Mapping Database Principals to Server Principals

Looking Forward to Getting My Kindle 2

Adobe Acrobat/Reader 0day - Disable JavaScript

You Must Trust Someone

You Must Trust Your DBAs

Another Reason to Avoid Cross-Database Ownership Chaining

The Limited Usefulness of Encrypting File System (EFS) and Transparent Data Encryption (TDE)

Blogs

SQL Server Distributed Availability Groups and Kubernetes

Webcast Tomorrow on SQL Server Disaster Recovery

SQL Server Quickie #48 – Azure SQL Managed Instance

Forums

Converting job_id to join to another table.

SSMS 20.2 on Windows11 not able to connect to SQL 2005 ??

Agent job security account

Question of the Day

What's the Ceiling?