asked
Security Audit script
We use another organisations database to host a database for us, and understandably, we would like to know that our data can be kept secure from the other organisations staff (we know that some of them do, and we have an arrangement for them). We don't have any sysadmin access to the server or the database, so we are going to ask that an audit report be produced on a regular basis. Things that we would like to know are; - What accounts have sysadmin access - What accounts have local server admin access (do we need to use xp_cmdshell for this, or is there another way?) - What accounts have any sort of access to our database Your help is very much appreciated.
I would recommend following articles by MVP K.Brian Kelley for your queries. His blogs are mainly focused on SQL Server Security at [mssqltips][1].
http://www.mssqltips.com/sqlservertip/2404/identify-local-administrators-on-a-sql-server-box-using-powershell/
http://www.mssqltips.com/sqlservertip/2599/auditing-sysadmin-on-multiple-servers-using-powershell/
http://www.mssqltips.com/sqlservertip/2048/auditing-sql-server-permissions-and-roles-for-the-server/
http://www.mssqltips.com/sqlservertip/2132/auditing-sql-server-user-and-role-permissions-for-databases/ [1]:
http://www.mssqltips.com
3 People are following this question.
