Logins, SIDs, and Kerberos from First Principles, Part 2: The Vanishing Service Account
Years ago at a previous employer, I wrote a fleet-sweep script that searched every SQL Server instance in the estate for a specific service account, by name and by a known-bad SID. I no longer…
Logins, SIDs, and Kerberos from First Principles, Part 1: What a SID Actually Is
Ask SQL Server who you are and it will answer with a name. Ask it to make a decision about you, though, and it uses something else entirely: a security identifier, or SID. Names are…
Backup & Recovery from First Principles, Part 11: The Keys Nobody Backs Up – SMK, DMK, and a War Story
ended the series with a rule: key material is a third artifact class beside data backups and log backups, and it needs its own backup. That post demonstrated the certificate side. This bonus part climbs…
Backup & Recovery from First Principles, Part 10: Backup Encryption and TDE – The Gotchas That Cost You the Restore
Every part of this series so far assumed one thing: if you have the backup file, you can restore it. Encryption changes that deal. An encrypted backup (or any backup of a TDE database) is…
Backup & Recovery from First Principles, Part 9: BUFFERCOUNT, MAXTRANSFERSIZE, and Friends – Benchmarked
The BACKUP statement has a set of tuning knobs most people never touch: BUFFERCOUNT, MAXTRANSFERSIZE, BLOCKSIZE, and striping across multiple files.[1] Advice about them tends to be folklore, so this post is numbers instead: nine…
Backup & Recovery from First Principles, Part 8: Verification – Your Backup Job Succeeding Proves Almost Nothing
ended on an uncomfortable question: the “clean” full backup I used to repair a corrupted page – how did I know it was clean? This part demonstrates, with a deliberately corrupted database, exactly how little…