Active Directory
-
Query Active Directory from SQL Server
Have you ever had the need to query Active Directory right out of SQL Server using native TSQL? There are 3 ways to accomplish this. The first is CLR, but I won’t be covering that method. The other two methods are OPENROWSET and OPENQUERY. OPENROWSET requires Ad Hoc Distributed Queries to be enabled and OPENQUERY…
-
Kerberos Configuration Manager’s Nasty Bug
The Kerberos Configuration Manager is a really handy tool that can make configuring Kerberos a much easier task, but it’s got a nasty little bug. Configuring Kerberos can be tricky. In what way you ask? Here is a short list of just some of the things you have to consider. What is my SPN supposed…
-
SSPI Handshake Failed
A fellow community member sent me an email saying he was having trouble authenticating with Kerberos. Here is the error he was receiving: SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of…
-
Assign SQL Service Account with Group Policy
How do I assign and enforce a service account for the SQL Server Services with Active Directory Group Policy? The answer to this question requires that we step outside the DBA comfort zone since it requires the use of Active Directory and Group Policy Objects. There are many different ways that Active Directory can impact…
-
Active Directory and SQL Server Questions Answered
I presented for the PASS DBA Virtual Chapter several weeks ago and talked about different ways that Active Directory can affect your SQL Server. We only had an hour so I had to scale the content back and because of that I had a ton of questions. I answered what we had time for on…
-
SQL Service Account Recursive Group Membership
It was recently brought to my attention that a post with the script I talk about below could not be found on my blog. Either I thought I blogged about it and never did or it got lost when I had to change hosting providers late last year. My apologies for those who have been…
-
Holy Schnikes I’m Speaking at PASS Summit 2013
I am beyond excited to announce that I have been accepted to speak at the annual SQL PASS Summit 2013 in Charlotte, NC. This will be my first time to speak at this event and I can’t wait! The session I will be presenting is titled “How Active Directory Affects SQL Server”. I have been…
-
AD Password Never Expires Utility
A few years ago I had a need to find all accounts in Active Directory that had the “Password Never Expires” option set. I wrote an HTA with VBScript to make it easy to find these accounts for anyone with little AD experience. I posted the script in the Microsoft Scripting Guys’ community script repository…
-
How I Became a DBA
How Ryan Adams became a DBA and his involvement in the SQL community
-
Turbo Charge Active Directory
Turbo charge your active directory by enabling change notifications
-
AD LastLogon Utility
HTA utility to discover, manage, and report AD user last logon times.
-
Setting DNS Suffix Search List via GPO
Why setting the DNS Suffix Search order via GPO can be dangerous in the enterprise