Mssql Server Security

Installing, configuring and hardening Microsoft SQL Server

Last updated 2022-01-10 | 4.3

- Learn how to install Microsoft Windows Server
- Prepare Microsoft Windows Server environment for MS SQL Database installation
- Learn how to install Microsoft MS SQL Database from scratch

What you'll learn

Learn how to install Microsoft Windows Server
Prepare Microsoft Windows Server environment for MS SQL Database installation
Learn how to install Microsoft MS SQL Database from scratch
Installation decisions before building the RDBMS
Learn how to use Microsoft SQL Server Configuration Manager
Learn how to use Microsoft SQL Server Management Studio
Configure SQL Server in a secure way
Learn hardening Microsoft SQL Server
Surface Area Configuration & Reduction
Policy Based Management with Microsoft SQL Server
Using Powershell to configure SQL Server

* Requirements

* Basic understanding of IT systems
* Basic understanding of how relational database management systems work
* Computer Science background or job experience on IT is a plus
* Some database management experience is a huge plus

Description

  • Learn how to install Microsoft Windows Server
  • Prepare Microsoft Windows Server environment for MS SQL Database installation
  • Learn how to install Microsoft MS SQL Database from scratch
  • Installation decisions before building the RDBMS
  • Learn how to use Microsoft SQL Server Configuration Manager
  • Learn how to use Microsoft SQL Server Management Studio
  • Configure SQL Server in a secure way
  • Learn hardening Microsoft SQL Server
  • Surface Area Configuration & Reduction
  • Policy Based Management with Microsoft SQL Server
  • Using Powershell to configure SQL Server

Course content

7 sections • 35 lectures

About Your Trainer Preview 01:31

Overview Preview 05:44

Installation Decisions Preview 04:14

While designing your database system, you have to determine the most appropriate hardware according to your needs and requirements. Virtualization, CPU sockets and cores, Memory size are the factors to be considered in. Then you need to select the appropriate Operating System and its edition and select the appropriate Edition of SQL Server; 

Installating Windows Server Preview 03:02

For any database system, you have to install a server operating system to your server. This can be Linux-based or Windows-based. We choose Windows Server for this process. 

After installing Windows Server, we will install ADDS (Active Directory Domain Services) for a domain-controller and we will create a domain 

Installing Windows Server 2016 Preview 11:56

In this lesson we will 

  • Install Windows Server 2016
  • Install Guest Additions

Configuring Windows Server 2016 Preview 09:17

In this lesson we will 

  • Install Active Directory Domain services
  • Install DNS
  • Promote server to a domain controller
  • Add a new forest (higher layer of a domain. 1 or more domains can be under 1 forest)

Installing .net framework 3.5 Preview 02:25

In this lesson, you're going to learn how to install .Net framework 3.5 on Windows Server 2016. 

SQL Server Installation Preparations Preview 11:00

In this lesson, you're going to learn how to install sql server from scratch. This is important because you will be able practice the security configurations and hardening procedures on SQL server, if you follow along.

SQL Server Installation Preview 13:48

In this lecture we will install

  • Management tools
  • Database engine services
  • Named instance.
  • SQl Server agent
  • SQL Server Browser

Quiz - 1

MS SQL Server Configuration Overview Preview 01:19

SQL Server Configuration Manager is a tool

  • to manage services associated with the SQL Server
  • to configure the network protocols used by SQL Server
  • to manage the network connectivity configuration from SQL Server client computers

SQL Server Configuration Manager Preview 03:53

In this lesson, you're going to learn how to configure SQL server with the SSCM 

SQL Server Accounts Preview 05:19

  • VirtualAccounts
  • Managed Service Accounts
  • Group Managed Service Accounts

Managing Network Protocols Preview 04:15

In this lecture, you will practice configuring sql server network configurations, such as forcing encryption, hiding instance etc 

Using Powershell To Manage Network Protocols Preview 05:49

In this lecture, you will how to leverage powershell to configure network settings of the sql server 

Surface Area Configutation With sp_configure Preview 12:02

In this lecture we will focus on the top factors for securing your SQL Server instance and its hosted databases 

Surface Area Configuration With SSMS Preview 04:50

In this part, you will learn another way to update configuration options using SSMS, sql server management studio

Quiz - 2

Surface Area Reduction Introduction Preview 05:30

SQL Server is a popular target for hackers, so your data is at risk of being intentionally compromised. In addition, your data is also at risk of being accidentally compromised. You can minimize these risks by hardening SQL Server, which involves reducing its surface area and other security measures. 

Service Area Reduction Preview 08:31

In this lecture, you learn how to install required services on your sql server, or disable such features if you don't need them

Static and Dynamic Port Configurations Preview 09:00

In this lecture, you will learn

  • Setting a dynamic port
  • Setting a static port
  • Allowing a static port through firewall
  • Allowing a dynamic port

Extended Protection with Channel and Service Blinding Preview 07:06

In this lecture, you will learn how to install a certificate on the sql server in order to enable channel binding 

Hiding SQL Server Instance Preview 01:57

In this lecture, you will learn how to hide an instance of the database Engine in SQL Server by using SQL Server Configuration Manager

Quiz - 3

Policy Based Managent Introduction Preview 01:48

Monitor xpcmdshell Preview 11:18

In this lecture, you will learn how to create a new policy to log the changes of a configuration. Specifically, you will create a policy for xp_cmdshell procedure 

Preventative Policies Preview 06:08

Login Creation Preventative Policy Preview 04:08

The idea behind this policy is, if you try to create a new login on SQL server, this condition will detect this. And then the policy will prevent this happening. 

Introduction to Service Account Security Preview 01:56

Service Account Security Practice Preview 08:39

In this topic, you will learn how to create a managed service account to run SQL server jobs with limited permissions 

SQL Assistant Tools Preview 11:02

In this lecture we will install 

  • Baseline Security Analyzer
  • Open Management Studio

Patching and Complience Preview 02:57

Implementing a table name policy

Implement a policy which identifies any database table whose name starts with digits:: 0,1, or 9

Powershell Proxy Job

Create a job which executes a «Get-Content» windows powershell command using a proxy. Create a sample text file and read the content with this proxy job Locate the ERROR Log file of SQL Server. Read the contents using powershell script Give admin privs. to the Managed Service Account user to comp