509 reputation
1824
bio website devermind.com
location Germany
age 38
visits member for 5 years, 1 month
seen Feb 12 at 0:36
Please visit my development blog at http://devermind.com if you'd like to learn more about me.

Jan
4
comment How can I log the most CPU-Intensive processes in regular intervals?
Great, thanks again! :)
Jan
4
comment How can I log the most CPU-Intensive processes in regular intervals?
Thanks. Just one additional question: The TotalProcessorTime is good for finding general CPU hogs, but for CPU spikes I'd like to see the current CPU usage. Is there any way to get that via Powershell?
Jan
4
comment How can I log the most CPU-Intensive processes in regular intervals?
Thanks a lot! :)
Dec
12
comment Cannot add witness to my mirroring setup
The next line after the one you quoted restarts the mirroring session.
Dec
10
comment Cannot add witness to my mirroring setup
I think you are confusing this with the "alter database <dbname> set partner <hostname>" command. That one has to be executed on the mirror first, then on the principle. "Set witness" is only initiated on the principal - if you try to run it on the mirror, you get the following error: "Msg 1470, Level 16, State 2, Line 1 The alter database for this partner config values may only be initiated on the current principal server for database MYDBNAME"
Dec
10
comment Cannot add witness to my mirroring setup
I think the reason I did not get any monitoring data from the witness is that it raises less events than the principal and the event types are different as well. Please see my edit 3 above.
Dec
9
comment 10 servers to administer and I'm a history major
I'd like to express my sincere sympathy by upvoting this posting.
Dec
9
comment Cannot add witness to my mirroring setup
Thanks for the suggestion. I could not find the "Audit Database Mirroring Login" event (which event section is it? I searched all of "Security Audit", but it wasn't there). I added the results to my post above.
Dec
9
comment Cannot add witness to my mirroring setup
It's a name and I have triple-checked all three names can be resolved properly (via DNS) from all three hosts.
Dec
9
comment Cannot add witness to my mirroring setup
Yes, the witness endpoint is started. I am not using windows domains at all, but certificate-based authentication. Please see my OP for details.
Dec
5
comment Cannot add witness to my mirroring setup
@Ben: I successfully telnetted from the principal into the witness on the port of the mirroring endpoint. There is obviously no firewall problem.
Dec
3
comment Cannot add witness to my mirroring setup
@Ben: I had the same thoughts, but as already mentioned the firewall is currently switched off on the witness. And there are no outgoing port restrictions on the principal server.
Oct
28
comment How to enable encrypted connections to a SQL Server instance?
Actually you can activate the "force encryption" setting on the server without a trusted certificate, and it will always encrypt incoming connections. The only thing you cannot do in this scenario is activate the "encrypt connection" parameter on the client, because then it will complain about a non-trusted certificate. But that's only relevant for safeguarding against man in the middle attacks, not for making sure that people in your LAN cannot eavesdrop your SQL Server password.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Doc: Thanks for the advice. I definitely agree with the hint on ports. It helped me reduce the amount of brute force attacks on ssh on my linux servers a lot.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Daniel: Not in my experience. I could join my DC from another computer via a regular internet connection without any problems.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Daniel: This is not an issue in my scenario (see my OP above). I only have 2 domain clients and I don't expect having to join more than that anytime soon.
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
@Evan Anderson: What about setting up the Windows firewall as described in my post Edit above? Wouldn't that achieve more or less the same effect as setting up IPSec?
Jun
23
comment What's the risk of running a Domain Controller so that it is accessible from the internet?
Thanks for your reply! Would my idea above (see the edit) alleviate these two concerns?
Jun
22
comment Can't log anymore with RDP on my server after adding it in my domain
Thanks, I'll try changing the GPO so that RDP id explicitly allowed.
Jun
22
comment Can't log anymore with RDP on my server after adding it in my domain
That's the weird thing - I have not changed my default GPO at all. I would have expected settings to stay the same unless I explicitly state otherwise.