Tips & Troubleshooting — Security Manager
Command-Line Arguments
Launch with pre-filled connection settings:
DBLenseSecurityManager.exe -S SERVERNAME -U username -P password
DBLenseSecurityManager.exe -S SERVERNAME -E (Windows Authentication)
| Argument | Description |
|---|---|
-S / -Server | SQL Server instance name |
-U / -User | SQL login name (switches to SQL Authentication) |
-P / -Password | SQL login password |
-E | Use Windows Authentication (default) |
Troubleshooting
| Issue | Solution |
|---|---|
| Cannot see all logins | Requires VIEW SERVER STATE permission or sysadmin role |
| Cannot manage logins | CREATE/ALTER/DROP LOGIN operations require securityadmin or sysadmin |
| Failed logins not showing | Requires permission to read SQL Server error log (xp_readerrorlog) |
| Permission changes empty | Default trace must be enabled (it is by default). Check sp_configure 'default trace enabled' |
| Drift detection slow | Drift compares all users and roles between two databases. Large databases with many principals may take longer. |
| Orphaned user count wrong | The tool checks for users where the linked SID does not match any server login SID |
System Requirements
| Component | Requirement |
|---|---|
| Operating System | Windows 10/11 or Windows Server 2016+ |
| SQL Server | SQL Server 2016 or later |
| Azure | Azure SQL Managed Instance |
| Authentication | Windows, SQL Server, Azure Entra ID (Password & MFA) |
| Minimum Permissions | VIEW SERVER STATE for read-only access |
| Management Permissions | securityadmin or sysadmin for login/user management |