Central management, alerting, and auditing of the most important
element of database administration: security.
Making SQL Security Effortless
Minion Security Enterprise wants to make security effortless. Benefits include:
- Comprehensive scripts of logins and user permissions allow you to reinstate changed permissions and accounts
- Records of user permissions for use in audits
- Audit password policy enforcement, unused logins, bad password attempts, and more instantly across all instances
- Duplicate user privileges: to create a new user identical to an existing user, to duplicate security from dev to test instances, etc.
- Transparency into Windows groups permissions (including nested subgroups)
- And, much more
One Component of Minion Enterprise
Minion Enterprise (ME)Â bundles together all of the Minion modules:
- Minion Core
- Minion Security
- Minion Space Tracker
- Minion Backup
- Minion Reindex
- Minion CheckDB
You can purchase one or more of the Minion modules as you need them, or get the whole group as a homogenous install in Minion Enterprise.
Email us atÂ Support@MidnightDBA.comÂ to get a 90 day trial of Minion Enterprise today!
How much does Minion Security cost?
I heard xp_cmdshell is unsafe, but Minion Security may require it. What now?
Short answer: xp_cmdshell is not unsafe. Once turned on, itâ€™s limited to system administrators by default. And we give you information on locking it down here in Seanâ€™s article:Â Security Theater.
Medium answer: Chances are, if you have a free backup and maintenance system in place thatÂ isnâ€™tÂ Minion, itâ€™s using sqlcmd steps in the SQL Agent jobs. (Weâ€™re talking about the Ola Hallengren maintenance solution, now.) This is actually not at all secure; itâ€™s turned on by default, and anyone who has rights to alter jobs can make changes to the step. See theÂ Security TheaterÂ article for more information.
Long answer: You guessed itâ€¦the long answer is theÂ Security TheaterÂ article!
Is there any training for Minion Security?
We have extensive documentation that includes full explanations, examples, and more, on ourÂ Support site.
If youâ€™re a better visual learner, check out ourÂ Training pageÂ for videos that teach the concepts, and also discuss nuances and advice for configuring features. If you still need help after all that, feel free toÂ contact us.
What if I have problems? Is there support?
Absolutely. Just enter a ticket on ourÂ support site, and weâ€™ll help you out.
Whatâ€™s involved in setting up Minion Security?
System requirementsÂ for the repository are:
A default instance of SQL Server 2012 or above. (Managed instances can be SQL Server 2005 or above.)
The SQL Agent service account requires sysadmin rights on all managed SQL Server instances, and access to run system-level WMI queries on all managed servers (which can be accomplished by granting the SQL Agent service account local administrator rights on each managed server). Note: Check your companyâ€™s security policies for compliance.
The sp_configure setting xp_cmdshell may need toÂ be enabledÂ for some features.
PowerShell 2.0 or above; execution policy set to RemoteSigned.
Note: Minion SecurityÂ doesnâ€™t install any objects on managed servers.
Setup:Â Run the installer on your repository server, install the license, and insertÂ the names of your managed servers to the dbo.Servers table. Thatâ€™s about it!