Security
-
Connect securely to Snowflake in Fabric Pipelines and Copy Jobs
Snowflake is a common source and sink for enterprise data movement, and Microsoft Fabric Data Factory supports it in both pipelines and Copy Jobs. Here is how Workspace-level Private Link, a private Azure Storage account, and Snowflake’s USE_PRIVATELINK_ENDPOINT fit together to keep the whole path off the public internet.
-
Disabling Public Network Access in Synapse
Disabling public network access on a Synapse workspace throws a 403 in Synapse Studio. Here is why, and how private endpoints fix it.
-
Always Encrypted Data Displayed in SSRS with a gMSA
Let’s take a look at how to display Always Encrypted Data in SSRS with a gMSA (Group Managed Service Account). We are mixing some technologies and the one that throws a wrench into things is the gMSA. Here is the flow for moving the certificates. Always Encrypted protects our data both at rest and in…
-
Database Mail Breaks with TLS 1.0 Disabled
Discovery I ran across an issue where I had just configured database mail on a new server, went to send a test email, and I waited to receive it. I waited…and waited…and waited, but still nothing. I started to investigate and verified that database mail was indeed enabled, Service Broker was running, and the mail…
-
SQL Server on Linux Authentication
Yesterday Microsoft announced that they will now support SQL Server on Linux. They are targeting mid-2017, but you can download a preview now. I am on a technical list where I saw someone inquire about the support for Windows authentication or if SQL authentication would be the only choice. Those of you that know me…
-
Assign SQL Service Account with Group Policy
How do I assign and enforce a service account for the SQL Server Services with Active Directory Group Policy? The answer to this question requires that we step outside the DBA comfort zone since it requires the use of Active Directory and Group Policy Objects. There are many different ways that Active Directory can impact…
-
SQL Service Account Recursive Group Membership
It was recently brought to my attention that a post with the script I talk about below could not be found on my blog. Either I thought I blogged about it and never did or it got lost when I had to change hosting providers late last year. My apologies for those who have been…