MinionWare Presents: The truth about SQL Security | Sean McCown
In this session, we’ll look at how to REALLY lock down your SQL Server instances.
There’s a conspiracy against xp_cmdshell, and it’s time we demystify it. In this session we’ll walk step-by-step through permissions and proxies. We’ll demonstrate how easy it is for anyone with lower-level rights to grant themselves admin permissions, and go on to do anything they want with the data, the databases, and the instance itself. Xp_cmdshell isn’t the real issue here!
You’ll learn about the “service proxy model” that Microsoft uses consitstently for security. This is where we’ll learn the real truth about locking down SQL Server.
If you want to save the planet and everyone on it – or just secure your instances – attend this session!
Download Session Materials here: Oops! Looks like we're still waiting for session materials to be shared."