From e85173dd2af8356ea0c9d79eebb84857a161bb81 Mon Sep 17 00:00:00 2001 From: Jane Palmer Date: Thu, 19 Jun 2025 10:57:47 +0100 Subject: [PATCH] Update sp_Blitz.sql Extend details for Invalid Logins - empty AD Groups will occasionally show up here (it's an AD thing), and it's a pain to delete that group and then have to reinstate it in SQL when it turns out you do need it. --- sp_Blitz.sql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sp_Blitz.sql b/sp_Blitz.sql index 2d0f72f0..c8cf8c65 100644 --- a/sp_Blitz.sql +++ b/sp_Blitz.sql @@ -1862,7 +1862,7 @@ AS 'Security' AS FindingsGroup , 'Invalid login defined with Windows Authentication' AS Finding , 'https://docs.microsoft.com/en-us/sql/relational-databases/system-stored-procedures/sp-validatelogins-transact-sql' AS URL , - ( 'Windows user or group ' + QUOTENAME(LoginName) + ' is mapped to a SQL Server principal but no longer exists in the Windows environment.') AS Details + ( 'Windows user or group ' + QUOTENAME(LoginName) + ' is mapped to a SQL Server principal but no longer exists in the Windows environment. Sometimes empty AD groups can show up here so check thoroughly.') AS Details FROM #InvalidLogins ; END;