background preloader

SQL Server

Facebook Twitter

SQL Server 2016

SQL Home. Schema-Based Access Control for SQL Server Databases. Access-control within the database is important for the security of data, but it should be simple to implement.

Schema-Based Access Control for SQL Server Databases

It is easy to become overwhelmed by the jargon of principals, securables, owners, schemas, roles, users and permissions, but beneath the apparent complexity, there is a schema-based system that, in combination with database roles and ownership-chaining, provides a relatively simple working solution. Although the applications that use a database have a role in controlling access to data, it is extremely unwise to think that this is sufficient. Databases must have their own built-in access-control. This applies to all databases, even those that store only innocuous data that doesn’t include personal or financial information. In such cases, access control acts as a simple second-line defence against SQL Injection and other external attacks. A fundamental mistake is to try to assign permissions on an object-by-object basis. Of course, some flexibility may be required.

Cours12.pdf. Tutoriel de Bases de Données Relationnelles - Programmation avec une Base de Données. Guide de prise en main de l’analyse des performances pour Windows 7 et Windows Server 2008 R2. S'applique à: Windows 7, Windows Server 2008 R2 L’Analyseur de performances Windows est un composant logiciel enfichable MMC (Microsoft Management Console) qui combine les fonctionnalités d’outils autonomes existants, notamment l’utilitaire Journaux et alertes de performance, le Conseiller de performances du serveur et le Moniteur système.

Guide de prise en main de l’analyse des performances pour Windows 7 et Windows Server 2008 R2

SQL 2014 et la gestion de la sécurité. Le Post de MCNEXT. Panorama des nouveautés de SQL Server 2014.

Le Post de MCNEXT

Les nouveautés abordées sur la plate forme de données : Database Engine, In Memory, Cloud, Big Data, BI, outils Présentation par Franck Mercier. Sys.dm_os_performance_counters (Transact-SQL) SQL Injection Issues–Password Hashing. I’ve got a demo for one of my talks that really highlights some issues we have with SQL Injection.

SQL Injection Issues–Password Hashing

It’s part of my encryption talk, and it goes like this. NOTE: I am showing a simple example here, not one that I would deploy into production. The concepts are similar, but this specific code is not designed or applicable for cut/paste into a production system. Imagine I have a simple table of users and passwords. gocreate table UserTest ( firstname varchar(50) , passwordhash varbinary(max) ); go-- insert passwords insert usertest select 'Steve', HASHBYTES('SHA2_512', 'AP@sswordUCan! I’ve got two users and a fairly strong hash of their passwords. I create a simple proc that takes a username and a password as parameters. Blogs. Microsoft SQL Server Tips & Tricks. Comment faire pour recréer manuellement les valeurs de bibliothèque de compteurs de performance. Cet article décrit comment faire pour recréer manuellement les valeurs de bibliothèque de compteurs de performance.

Comment faire pour recréer manuellement les valeurs de bibliothèque de compteurs de performance

Important : Cette section, la méthode ou la tâche qui va suivre contient des étapes qui vous indiquent la méthode pour modifier le Registre de Windows. Toutefois, des problèmes sérieux peuvent survenir si vous modifiez le Registre de façon incorrecte. Par conséquent, assurez-vous de suivre ces étapes avec une attention toute particulière. Afin de couvrir votre système d'une protection supplémentaire, veuillez sauvegarder le Registre avant d'intervenir pour y apporter des modifications. Ainsi, si à la suite des modifications un problème devait survenir, vous pourrez toujours restaurer le Registre. How to revive SQL Server 2008R2 performance counters? I'm running SQL Server 2008R2 Developer on W7 x64, as the default instance.

How to revive SQL Server 2008R2 performance counters?

For some reason, SQL Server's performance counters seem to have disappeared. SELECT * FROM sys.dm_os_performance_counters returns zero rows. I tried running lodctr /T:perf-MSSQLSERVERsqlctr.ini. Although it completed without errors, it didn't fix anything, even after restarting the Remote Registry service. In fact, the counters are now missing from perfmon. unlodctr MSSQLSERVER still says that the counters are not installed, but lodctr /Q:MSSQLSERVER says they're present and enabled. In the Windows Error log, I'm seeing Error 8317: Troubleshooting: SQL Server (2005, 2008) Performance Counter Collection Problems - CSS SQL Server Engineers. I was asked by our support team to help outline performance counter troubleshooting when the counters don't appear, are missing or don’t seem to be working as expected.

Troubleshooting: SQL Server (2005, 2008) Performance Counter Collection Problems - CSS SQL Server Engineers

I agreed to look into it and as you can see from the information below it turned into a much larger effort than I originally planned. (I originally had this and the How It Works post ( in an e-mail. I have converted it to the blog so I hope formatting and content still applies.) Looking at some of the issues Microsoft SQL Server Support was handling I found a trend that unlodctr/lodctr was used the vast majority of the time and it resolved the problem. Anytime I see such a trend I want to know the root cause so a fix can be made and no one has to take additional steps.

After putting this together here is what I would tell you to do if you want to just get them working. Using an elevated administrator command prompt perform the following steps. 1. Preparing to Troubleshoot 1. Step 01.