One of my favorite database guys wrote a whitepaper about my favorite topic: security.
Check out "SQL Server 2005 Security Best Practices" – interesting read!
