MS SQL 2008 R2, security and auditing

How can I portray body horror and still be sensitive to people with disabilities?

What are the drawbacks of putting my staging and production dbs into one Azure Elastic Pool?

I hate taking lectures, can I still survive in academia?

How to play song that contains one guitar when we have two guitarists (or more)?

Prove that a cyclic group with only one generator can have at most 2 elements

Badly designed reimbursement form. What does that say about the company?

Coworker is trying to get me to sign his petition to run for office. How to decline politely?

Discouraging missile alpha strikes

Is a 1hr 3min layover at ORD (Chicago) enough when coming in international?

How can a kingdom keep the secret of a missing monarchy from the public?

Apparently I’m calling random numbers but there's nothing in the call log

Why does finding small effects in large studies indicate publication bias?

Someone wants me to use my credit card at a card-only gas/petrol pump in return for cash

Would life expectancy increase if we replaced healthy organs with artificial ones?

Why does Python copy NumPy arrays where the length of the dimensions are the same?

Does human life have innate value over that of other animals?

How to assess the susceptibility of a U.S. company to go bankrupt?

Is 'bad luck' with former employees a red flag?

Movie where a woman is running away from a plant creature which rips her shorts?

Why there is no EEPROM in STM32F4 MCUs

Can a rabbi conduct a marriage if the bride is already pregnant from the groom?

How should I ship cards?

Pictures from Mars

Rational with finite decimals values for sine, cosine, and tangent



MS SQL 2008 R2, security and auditing














0















i have an 2008r2 sql server.
There are few AD groups added to logins.
Each group must have some permissions(and only this permissions if possible)
Can someone help me with few questions:




  • can i restrict perms for one of the groups only to view users and their permissions? And if we have only AD groups in Login section - executing stored proc like xp_logininfo 'domaingroup' , members is the only one way to show users in this group?


  • all users getting "public" role by default. I've exluded all permissions from perm section in role properties, but users with this role still able to see system databases. Can i deny this?










share







New contributor




Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

























    0















    i have an 2008r2 sql server.
    There are few AD groups added to logins.
    Each group must have some permissions(and only this permissions if possible)
    Can someone help me with few questions:




    • can i restrict perms for one of the groups only to view users and their permissions? And if we have only AD groups in Login section - executing stored proc like xp_logininfo 'domaingroup' , members is the only one way to show users in this group?


    • all users getting "public" role by default. I've exluded all permissions from perm section in role properties, but users with this role still able to see system databases. Can i deny this?










    share







    New contributor




    Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.























      0












      0








      0








      i have an 2008r2 sql server.
      There are few AD groups added to logins.
      Each group must have some permissions(and only this permissions if possible)
      Can someone help me with few questions:




      • can i restrict perms for one of the groups only to view users and their permissions? And if we have only AD groups in Login section - executing stored proc like xp_logininfo 'domaingroup' , members is the only one way to show users in this group?


      • all users getting "public" role by default. I've exluded all permissions from perm section in role properties, but users with this role still able to see system databases. Can i deny this?










      share







      New contributor




      Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.












      i have an 2008r2 sql server.
      There are few AD groups added to logins.
      Each group must have some permissions(and only this permissions if possible)
      Can someone help me with few questions:




      • can i restrict perms for one of the groups only to view users and their permissions? And if we have only AD groups in Login section - executing stored proc like xp_logininfo 'domaingroup' , members is the only one way to show users in this group?


      • all users getting "public" role by default. I've exluded all permissions from perm section in role properties, but users with this role still able to see system databases. Can i deny this?








      sql-server-2008-r2 security audit





      share







      New contributor




      Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.










      share







      New contributor




      Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.








      share



      share






      New contributor




      Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      asked 2 mins ago









      HorchoHorcho

      1




      1




      New contributor




      Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





      New contributor





      Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






      Horcho is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "182"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: false,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });






          Horcho is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f230240%2fms-sql-2008-r2-security-and-auditing%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          Horcho is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          Horcho is a new contributor. Be nice, and check out our Code of Conduct.













          Horcho is a new contributor. Be nice, and check out our Code of Conduct.












          Horcho is a new contributor. Be nice, and check out our Code of Conduct.
















          Thanks for contributing an answer to Database Administrators Stack Exchange!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f230240%2fms-sql-2008-r2-security-and-auditing%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          ORA-01691 (unable to extend lob segment) even though my tablespace has AUTOEXTEND onORA-01692: unable to...

          Always On Availability groups resolving state after failover - Remote harden of transaction...

          Circunscripción electoral de Guipúzcoa Referencias Menú de navegaciónLas claves del sistema electoral en...