Performance Store

Server security differences

An alert will be thrown, if two SQL Servers are a failover pair, and there are differences in the security between the two servers. It is a common problem that logins differs between two failover nodes.

To query the Performance Store database for security differences between two servers, use:

exec dbo.s_server_security_diff '[server 1]', '[server 2]'

Logins can be synchronized between servers by executing the “create_statement” from the dbo.v_server_security view.

A script for synchronizing logins between a primary and secondary can automatically be created. See Synchronize Availability Group objects for more information.

Note, this is different from other similar areas in the following way:

• “Server differences” shows differences in operating system, SQL Server version, trace flags, startup types, etc.
• “Server configuration differences” shows differences in memory settings, optimize for adhoc workloads, Ole Automation, etc.
• “Server securables differences” shows differences in grants, permissions, etc.

The alert will be visible on the Latest stats dashboard.

To exclude specific servers from this alert, see how to use the dbo.team_alert_exclude table in Alerting.