Webcast: How to Secure SQL Server – End to End Security

On April 16, 2024, I will be giving another webcast; this one will be on SQL Server security.

Sign up link

As always, the registration is free. Here’s the abstract:

Data is the lifeblood for almost every organization. As a result, platforms like Microsoft SQL Server are high-value targets for attackers. However, knowing what to do and not do can be daunting.

In this webinar, we’ll walk through a framework to secure your SQL Servers from end-to-end. Starting with the install and walking through surface area, permissions, backups, encryption, and concluding with decommissioning, we’ll cover every area you’ll need to consider for your SQL Server environment. Where they are applicable, we’ll also point out industry good practices and where to find the documentation on them.

By the end of the webinar, you should leave with a plan for where to start, what’s most important, and where to go for more information to ensure you can properly harden and secure the SQL Servers in your organization.

Tomorrow – Webcast on SQL Server Administration

I will be giving another Microsoft SQL Server-based webcast, this time on the administration of Microsoft SQL Server. The webcast is scheduled for March 26, 2024 at 1 PM Eastern.

Registration link (free): What a DBA Needs to Know about SQL Server Administration

Here is the abstract for the webinar:

The DBA role encompasses a broad range of skills and focus areas. One of those is SQL Server administration.

What does a DBA charged with SQL Server administration need to know to be successful? In this webinar, we’ll look at the key areas you should master if you’re charged with SQL Server administration: a secure installation, ensuring proper backup/recovery mechanisms to meet recovery time objectives (RTOs)/recovery point objectives (RPOs), securing access to SQL Server and the data contained within, baselining and performance monitoring, and finally, basic troubleshooting – where to look and what to look based on the issues a particular SQL Server is experiencing.

Webcast on SQL Server Administration

I will be giving another Microsoft SQL Server-based webcast, this time on the administration of Microsoft SQL Server. The webcast is scheduled for March 26, 2024 at 1 PM Eastern. It’s scheduled for 1 PM EDT / 5 PM UTC.

Registration link (free): What a DBA Needs to Know about SQL Server Administration

Here is the abstract for the webinar:

The DBA role encompasses a broad range of skills and focus areas. One of those is SQL Server administration.

What does a DBA charged with SQL Server administration need to know to be successful? In this webinar, we’ll look at the key areas you should master if you’re charged with SQL Server administration: a secure installation, ensuring proper backup/recovery mechanisms to meet recovery time objectives (RTOs)/recovery point objectives (RPOs), securing access to SQL Server and the data contained within, baselining and performance monitoring, and finally, basic troubleshooting – where to look and what to look based on the issues a particular SQL Server is experiencing.

Four Things PASS gets Right

PASS has taken a lot of heat recently. A few folks have pointed out that you only seem to hear when people are upset at PASS at something. So here’s my take on what PASS has done correctly.

The Summit

The Summit is a premier conference for SQL Server professionals. How do I know? Watch all the griping when speaker announcements are made. A lot of folks want to speak at the conference because they perceive it to have a lot of value. A lot of folks attend the conference because they perceive it to have a lot of value. A lot of value + financially affordable to PASS = premier conference.

Virtual Chapters

Virtual Chapters are awesome. Look at how many there are and how much FREE training they provide to the community. Yes, they are staffed by volunteers, however, they are still under the PASS umbrella.

Chapter Tools

First, there’s the free web hosting. It’s been around for a while. Yes, it’s DotNetNuke, but the templates are simple and workable for a chapter.

Second, there is the automated mailing. This allows a chapter leader to get the news out without having to go to MailChimp or some other resource. Also, as folks sign up at the chapter website, they are automatically added to the distro list. Easy all around.

Third, PASS has built the integrated events module. You set up the event details under the PASS Chapter tools and if you’re website is configured, the details automatically appear on your chapter homepage. In addition, the event details appear in the PASS master list of events. You don’t have to go to multiple places to get the word out.

The 24 Hours of PASS

More FREE training. And if you can’t stay around for the whole 24 hours, don’t worry, sessions are recorded and eventually available on-line.

Midlands PASS July Meeting – July 10

The Midlands PASS Chapter will hold its next meeting on July 10. We meet at MicroStaff IT in Cayce, SC. Here is the main presentation:

Statistics, Indexes, and their Impact

Speaker: Brian Kelley, SQL Server MVP

Statistics. Indexes. Clustered Indexes. Non-Clustered Indexes. Covering Indexes. Bookmark Lookups. Perhaps you’ve heard these terms. They determine how well or poorly your queries run. In this session, we’ll look at what these things are, how they impact your queries, what to do to maximize their use, and when you should consider making changes.

This is a 100-200 level presentation.

You can RSVP for the meeting (it helps us plan for food) at the EventBrite Event Page for this meeting.

 

The Scary DBA Comes to Columbia, SC

*sound of glass crashing* *cue theme music*

(in a wrestling announcer’s shocked voice) “It can’t be! He’s not supposed to be here! It’s the Scary DBA! What’s he doing here!”

That’s right, folks, SQL Server MVP Grant Fritchey (blog | twitter) will be coming to speak in Columbia, SC on May 22, 2014. You can register to attend (free) here:

Midlands PASS – May 22nd Meeting with Grant Fritchey

Here is what Grant will be talking about:

Building a Database Deployment Pipeline

The pace of business accelerates fairly continuously and application development moves right with it. But we’re still trying to deploy databases the same way we did 10 years ago. This session addresses the need for changes in organizational structure, process and technology necessary to arrive at a nimble, fast, automatable and continuous database deployment process. We’ll use actual customer case studies to illustrate both the common methods and the unique context that led to a continuous delivery process that is best described as a pipeline. You will learn how to customize common practices and tool sets to build a database deployment pipeline unique to your environment in order to speed your own database delivery while still protecting your organization’s most valuable asset, it’s data.

 

If you are closer to Raleigh or Charlotte, Grant will also be appearing in those venues. You can find details about those visits at the Charlotte SQL Server user group site.

 

Security #Datachat on Twitter Tonight

Tonight, at 9 PM Eastern, I’ll be participating in a #datachat on SQL Server security. It’s sponsored by Confio (now part of Solarwinds).

You can find more details about the #datachat here.

How can you participate? Simply open up a search for #datachat and participate in the community Q and A. The more, the merrier!

I hope to see you online.

Presenting on Security at Midlands PASS

On Thursday, February 13, 2014, I’ll be at Midlands PASS in Columbia, SC. We’ll be meeting from 5:30 PM to about 7:30 PM. I’ll once again be given an open ended SQL Server security talk. Here’s the description:

Midlands PASS Chapter’s annual SQL Server security refresher! This is an open-ended discussing hosted by SQL Server MVP and resident SQL Server security expert, Brian Kelley. Bring your scenarios and questions and we’ll work through the best ways to build security solutions for and using Microsoft SQL Server.

We meet at Microstaff IT in Cayce, SC. They are a great host and we enjoy the accommodations. If you’re in the area, please stop on by!

We do ask that you RSVP so we know how much food to bring.

Free Online SQL Server Training for the Week of January 12, 2013

If you’re a training provider and I’ve missed you, please drop me a line at brian {dot} kelley {at} sqlpass {dot} org.

All times are Eastern (New York). To convert to your local time, use the converter at timeanddate.com.

 

Monday, Jan 13:

• 11 AM – Big Boys’ Toys: ColumnStore Indexes with Table Partitioning – Andrew Whettam – PASS BI VC

Tuesday, Jan 14:

• 11 AM – Bus Matrix – the foundation of your Data Warehouse – William Anton –Pragmatic Works

Thursday, Jan 16:

• 11 AM – Necessarily Evils, Building Optimized CRUD Procedures – Jason Strate – Pragmatic Works
• 12 PM – Analytics at Cisco – Arun Saksena – PASS Business Analytics VC
• 12 PM – Attributes & Hierarchies in Analysis Services 2012 – Thomas LeBlanc – PASS BI VC
• 3 PM – Building a Rock-Solid Backup Solution – Brian Kelley – Idera / MSSQLTips.com

 

Training Providers I Regularly Review:

• Confio
• Idera
• Microsoft
• MSSQLTips.com
• Pragmatic Works
• Professional Association for SQL Server – I’m using the events page. If you’re a chapter leader and haven’t converted your meeting announcements over to Events, please check the Chapter Dashboard to learn how to do so.
• SQL Lunch
• SQL Sentry
• SSWUG.org

Being a Better IT Pro – Grammar

In my IT career, one of the things I have found that sets me apart is my ability to write. As IT pros, we write a lot. Whether we’re talking email or documentation, senior level IT workers are always writing. However, not all of us graduated college with a degree in English. I certainly didn’t. The good news is you don’t have to have an English degree to write well. Writing well consists of understanding the rules, observing good writing, and practicing.

One of the biggest areas that folks struggle is with respect to grammar. A grammatical mistake can obliterate an otherwise well-written message. Here are some of the big offenders:

CopyBlogger: 15 Grammar Goofs That Make You Look Silly

Do you struggle with any of these rules? The best way to overcome the problematic rule is to study the rule and then practice using it. For instance, the rule on there, their, and they’re is one a lot of people get wrong. There refers to a place, their is possessive, and they’re is a contraction of they are. If I was having an issue with this rule, I’d try to write 20 sentences of each example. After a few days of practice, I’d have the rule down. If you’ve never tried this exercise, it works on the concept of deliberate practice.

Master these 15 rules as a start to writing better. Writing, like most other skills, is a skill you can always improve on. Professional writers are always writing. They are always trying to improve. Even though writing isn’t our primary skill, it is still an important one for any IT worker. Invest time and effort in your writing and you greatly benefit your career.