SQL Server Science

Technical Articles for the DBA / Developer

Home

Logins, SIDs, and Kerberos from First Principles, Part 8: Auditing Logins with Service Broker

2026-08-17 · by Hannah Vernon · in configuration, security

The series so far has answered who can connect ( showed even that requires asking Windows) and how they prove it ( and ). The closing question is who actually does. Group-based access means the…

Logins, SIDs, and Kerberos from First Principles, Part 7: Is Your Kerberos Still Using RC4?

2026-08-16 · by Hannah Vernon · in security, troubleshooting

got your connections onto Kerberos. This part asks an uncomfortable follow-up: encrypted with what? You probably have not thought about Kerberos encryption types recently. That is fair; the protocol mostly just works and has for…

Logins, SIDs, and Kerberos from First Principles, Part 6: SPNs and the Silent NTLM Fallback

2026-08-15 · by Hannah Vernon · in security, troubleshooting

The first five parts of this series were about who you are: SIDs, logins, groups. This one is about how you prove it. When a Windows principal connects to SQL Server with integrated authentication, one…

Logins, SIDs, and Kerberos from First Principles, Part 5: Windows Groups and the Invisible Members

2026-08-14 · by Hannah Vernon · in configuration, security

Every post in this series so far has dealt with principals you can see: a login row in sys.server_principals with a name and a SID. Windows groups break that comfortable assumption. Grant a group a…

Logins, SIDs, and Kerberos from First Principles, Part 4: Scripting Every Permission a Principal Holds

2026-08-13 · by Hannah Vernon · in configuration, security

moved logins between servers with their SIDs and passwords intact. That gets a principal through the front door; it says nothing about what the principal can do once inside. Permissions live in a different set…

Logins, SIDs, and Kerberos from First Principles, Part 3: Migrating Logins Without Losing Them

2026-08-12 · by Hannah Vernon · in configuration, security

Server migrations have a predictable failure mode: the databases restore perfectly, the application connection strings are updated, and then nothing can log in. Or worse, everything can log in but half the database users are…

1 2 … 49 Next »

Search

Categories

  • AI for DBAs
  • announcements
    • events
  • basics
    • localization
  • configuration
  • Data Architecture
  • DMVs
  • documentation
  • extended-events
  • Git for DBAs
  • High Availability
  • Hot Takes
  • Internals
  • maintenance
    • patching
  • Opinion
  • performance
  • PostgreSQL
  • Professional Development
  • recovery
  • reporting
  • ROLLBACK;
  • security
    • data security
  • service broker
  • SQL Server Agent
  • statistics
  • sys
  • t-sql
    • xml
  • tools
    • data masking
    • wsus
  • troubleshooting
  • Uncategorized

Pages

  • About SQL Server Science
  • Get Better Help with a Minimal, Complete, and Verifiable Example, or MCVE
  • Privacy Policy

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.

To find out more, including how to control cookies, see here: Cookie Policy

Copyright © 2026 SQL Server Science