Several months ago, I discussed my customer’s intention to enable trace flag 3625. Since that time, we have observed an intriguing phenomenon when encountering a login failure. To demonstrate...
2024-12-13 (first published: 2024-12-10)
464 reads
One of my customers recently wanted to rename each of the SQL audit files will the datetime stamp of when it was created. I explained to them the filename...
2025-01-15 (first published: 2024-11-05)
508 reads
SQL Server Audit is an efficient way to track and log events that occur within the database engine. For on-premises or IaaS environments, those audits can only be stored...
2024-10-30 (first published: 2024-10-15)
344 reads
Recently, one of my customers considered enabling Trace Flag 3625 on one of their SQL Servers, but they wanted a way to quickly test its functionality beforehand. For those...
2023-12-22 (first published: 2023-12-12)
503 reads
In a previous blog post, I showed you how to use PowerShell to retrieve the details of the certificate being used for encryption-in-transit, aka TLS encryption. I have received...
2023-11-22 (first published: 2023-11-14)
766 reads
In a few previous articles, I have talked a lot about Managed Service Accounts (MSA) and Service Principal Names (SPN) and given examples of managing the separately. As a...
2022-11-11 (first published: 2022-11-01)
319 reads
Managed Service Accounts (MSA) are intended to run as a service and not to be used by an end user to logon interactively; however, there are some cases where...
2022-03-15
95 reads
In my previous post, I discussed how to setup Kerberos constrained delegation and a limitation of using that method. This post will discuss how we can used resource-based Kerberos...
2022-03-01
190 reads
For those of you that need to setup Kerberos constrained delegation for Group Managed Service Accounts, you will likely get more familiar with msDS-AllowedToDelegateTo. This attribute stores a list...
2022-02-15
268 reads
Kerberos delegation is not a new concept in Active Directory; however, setting it up for Group Managed Service Accounts (gMSA) can be a bit confusing. Unlike normal domain accounts,...
2022-02-01
522 reads
We value your privacy. This policy explains what personal data we collect and why. What...
This came up one day at my work when a developer was using it....
I’m sure I’ve never mentioned that I’m an amateur radio operator. Like Vegans and...
I spotted this in the release notes for CU17 in SQL Server 2022: KB3616559...
I migrated DB server from 2017 enterprise to 2019 enterprise. After the migration, every...
Comments posted to this topic are about the item How Much AI Code Would...
I have a SQL Server instance that is not listening for connections on port 1433. By default, all ports are locked down on my server, except for the SQL Server port. What can I do to allow users to connect to the instance without knowing the port?
See possible answers