Nt1330 Unit 1 Assignment

Words: 415
Pages: 2

Let me begin with the statement, that there is something wrong with this company's windows accounts permission settings for the SQL Server databases. An actuary's windows account shouldn't be given a permission to access the SQL Server databases directly. From my little experience, it is the client application that is given a permission to the database, and a user logs in into the application with the windows account. How did this tech-savvy actuary obtain the credentials to access the databases directly? Is he so savvy, that he was able to hack the system and read the credentials that the applications are sending to the server? Did he get the credentials from his friend administrator? Is his account added as a SQL Server administrator? This is something to investigate. …show more content…
I, as a database administrator can track and gather additional information on the client application, network protocol, and the queries queued by the actuary. The open connections to the server can be tracked with the NETSTAT command line utility (Akkawi, F., Akkawi, K., Schofield, G., 2014, p. 95). This tool shows the protocol used, foreign address and a port used for all established connections. Another method of tracking the open connections is opening Activity Monitor for an SQL Server and observing the processes pane. In this pane, we can see the rouge process including the login, the database accessed, task state, command used and the application that is accessing the server. From here we can also right click the process and trace the process in SQL Server Profiler. This tool allows us to monitor the events, including the commands used, the application used, NT Username, Login Name alongside with the Start and End times for the