The What, Why and How of Software Security

I recently presented a TechNet Webcast on the topic “Configuring with Least Privilege in SQL Server 2008”. The topics covered in the Webcast are:- 1. Configuring SQL Server service accounts with least privilege. Service isolation is also explained. 2. Read More...

Identify as many security issues as you can with this piece of code:- 1: [WebMethod] 2: public string GetEmpName( string empid) 3: { 4: SqlConnection con = new SqlConnection( "server=.;database=test;uid=sa;pwd=PassW2rd12" ); 5: SqlCommand cmd = new SqlCommand( Read More...

How to: Run Sql Server Agent service under an account which is not a member of the local administrators group 1. Add the account under which you want to run the Sql Server agent service in the SQLServer2005SQLAgentUser$ ComputerName $MSSQLSERVER group. Read More...