AbstractWhat to Install, and When?SQL Authentication and Windows AuthenticationPassword Change PoliciesAuditing Failed LoginsRenaming the SA AccountDisabling the SA AccountSecuring EndpointsStored Procedures as a Security MeasureMinimum Permissions PossibleInstant File InitializationLinked ServersUsing Policies to Secure Your InstanceSQL Azure Specific SettingsInstances that Leave the OfficeSecuring AlwaysOn Availability GroupsSecuring Contained DatabasesSQL CLRExtended Stored ProceduresProtecting Your Connection StringsDatabase FirewallsClear Virtual Memory PagefileUser Access Control (UAC)Other Domain Policies to AdjustSummary