514 reputation
1924
bio website devermind.com
location Germany
age 38
visits member for 5 years, 5 months
seen Oct 9 at 19:06
Please visit my development blog at http://devermind.com if you'd like to learn more about me.

Dec
5
comment Cannot add witness to my mirroring setup
@Ben: I successfully telnetted from the principal into the witness on the port of the mirroring endpoint. There is obviously no firewall problem.
Dec
3
comment Cannot add witness to my mirroring setup
@Ben: I had the same thoughts, but as already mentioned the firewall is currently switched off on the witness. And there are no outgoing port restrictions on the principal server.
Dec
3
asked Cannot add witness to my mirroring setup
Nov
3
awarded  Notable Question
Oct
28
comment How to enable encrypted connections to a SQL Server instance?
Actually you can activate the "force encryption" setting on the server without a trusted certificate, and it will always encrypt incoming connections. The only thing you cannot do in this scenario is activate the "encrypt connection" parameter on the client, because then it will complain about a non-trusted certificate. But that's only relevant for safeguarding against man in the middle attacks, not for making sure that people in your LAN cannot eavesdrop your SQL Server password.
Sep
29
awarded  Yearling
Aug
1
accepted How can I create a database backup replacing the previously created backup file?
Aug
1
asked How can I create a database backup replacing the previously created backup file?
Jul
9
awarded  Popular Question
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Doc: Thanks for the advice. I definitely agree with the hint on ports. It helped me reduce the amount of brute force attacks on ssh on my linux servers a lot.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Daniel: Not in my experience. I could join my DC from another computer via a regular internet connection without any problems.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Daniel: This is not an issue in my scenario (see my OP above). I only have 2 domain clients and I don't expect having to join more than that anytime soon.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Evan Anderson: What about setting up the Windows firewall as described in my post Edit above? Wouldn't that achieve more or less the same effect as setting up IPSec?
Jun
23
revised What's the risk of running a Domain Controller so that it is accessible from the internet?
added 228 characters in body
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
Thanks for your reply! Would my idea above (see the edit) alleviate these two concerns?
Jun
23
revised What's the risk of running a Domain Controller so that it is accessible from the internet?
added 165 characters in body
Jun
22
asked What's the risk of running a Domain Controller so that it is accessible from the internet?
Jun
22
accepted Can't log anymore with RDP on my server after adding it in my domain
Jun
22
comment Can't log anymore with RDP on my server after adding it in my domain
Thanks, I'll try changing the GPO so that RDP id explicitly allowed.
Jun
22
comment Can't log anymore with RDP on my server after adding it in my domain
That's the weird thing - I have not changed my default GPO at all. I would have expected settings to stay the same unless I explicitly state otherwise.