I have been setting up policies on my 2008 servers. I thought a good place to start would be with the suggested policies Microsoft provides with their samples. You can download the sample databases from codeplex.

I came across a sample policy named “Public Not Granted Server Permission”, now this sounds like something a person would want to implement. I imported the policy and ran it on my test system and discovered my system failed, but I was not really sure why. The policy explains that the server role public has been granted server level permissions. OK, but what does that mean? What server level permissions? This policy does not provide an option to force compliance, so the dba must correct the issue manually, but how and if you correct what permissions will be revoked?

 On Thursday June 11th from noon to 1pm I will be speaking at the Louisville PASS chapter meeting.   The meeting is being held at Kindred Healthcare, 680 S. Fourth Street.  The topic is "Defensive SQL Server Security."  I believe that Idera will be providing Pizza.  I hope to see some of you there