When you revoke a permission in SQL Server, you remove the ability from the user account, but not from the user's role, or group. This means that the user can access the object if she is part of a ...

I'm rebuilding our SQL 2000 box and trying to figure out the best way to configure the permissions settings. The first question is whether to use a local or domain account for the SQL service account.

How to protect your database from SQL injection, data theft, rogue users, and well-meaning meddlers without tying your environment in knots Like so much of IT, database security requirements largely ...

Understand SQL Server Security SQL Server grew out of the UNIX world, and administrators maintained accounts (at that time) in a fashion similar to the "no domain" scenario in Windows. They created ...