--- title: How to Connect to Microsoft SQL Server Remotely Using... description: A step-by-step walkthrough shows how to remotely access Microsoft SQL Server using Teleport with Active Directory (Windows) authentication. It covers... canonical: https://daily.dev/posts/how-to-connect-to-microsoft-sql-server-remotely-using-teleport-pqjyjmquk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How to Connect to Microsoft SQL Server Remotely Using Teleport | daily.dev og:description: A step-by-step walkthrough shows how to remotely access Microsoft SQL Server using Teleport with Active Directory (Windows) authentication. It covers... og:url: https://daily.dev/posts/how-to-connect-to-microsoft-sql-server-remotely-using-teleport-pqjyjmquk og:image: https://api.daily.dev/og/posts/pqJYjmquk.png og:image:alt: How to Connect to Microsoft SQL Server Remotely Using Teleport og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How to Connect to Microsoft SQL Server Remotely Using Teleport **[Teleport](https://daily.dev/sources/teleport)** · 11 min read · 0 upvotes · 0 comments ## Summary A step-by-step walkthrough shows how to remotely access Microsoft SQL Server using Teleport with Active Directory (Windows) authentication. It covers recommended SQL Server security practices (Windows auth, limiting public exposure, auditing, RBAC), setting up AWS Managed AD, Amazon RDS SQL Server, a Windows EC2 AD management instance, and a Linux EC2 instance running the Teleport DB Service, followed by creating SQL Server logins and Teleport users, connecting via mssql-cli or GUI tools, and using Teleport's built-in RBAC and auditing features. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I connect to Microsoft SQL Server remotely using Teleport? Set up AWS Managed Active Directory, join an Amazon RDS SQL Server instance and a Linux EC2 instance running the Teleport DB Service to that directory, create a Kerberos keytab file, then start the Teleport DB Service with parameters like uri, ad-keytab-file, ad-domain, and ad-spn. Users connect through mssql-cli or GUI tools like Azure Data Studio via a local database proxy tunnel. _daily.dev surfaces practical database-access walkthroughs for engineers wiring up Teleport and SQL Server._ ### Why is Windows authentication recommended over SQL Server authentication for SQL Server security? Windows authentication is more secure because SQL Server performs no password validation itself and instead trusts credentials verified by Windows, avoiding stored passwords entirely. The default sa account is disabled under Windows authentication, whereas mixed mode enables both methods and requires extra hardening steps like renaming or disabling the sa account. _Developers weighing database authentication trade-offs can track security guidance like this on daily.dev._ ### What is required on a Linux server to let Teleport authenticate to SQL Server via Active Directory Kerberos? The Linux node running the Teleport Database Service must be joined to the Kerberos realm and have a keytab file created so it can obtain Kerberos service tickets from Active Directory. This keytab is referenced via the ad-keytab-file parameter when starting the Teleport DB Service alongside ad-domain and ad-spn settings. _Engineers configuring Kerberos-based database access can find setup details like this on daily.dev._ --- Tags: [#aws](https://daily.dev/tags/aws), [#microsoft-sql-server](https://daily.dev/tags/microsoft-sql-server), [#active-directory](https://daily.dev/tags/active-directory) [View this post on daily.dev](https://daily.dev/posts/how-to-connect-to-microsoft-sql-server-remotely-using-teleport-pqjyjmquk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How to Connect to Microsoft SQL Server Remotely Using Teleport","url":"https://daily.dev/posts/how-to-connect-to-microsoft-sql-server-remotely-using-teleport-pqjyjmquk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-connect-to-microsoft-sql-server-remotely-using-teleport-pqjyjmquk"},"datePublished":"2026-08-23T12:21:55.269Z","dateModified":"2026-08-23T12:45:09.045Z","description":"A step-by-step walkthrough shows how to remotely access Microsoft SQL Server using Teleport with Active Directory (Windows) authentication. It covers...","image":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","thumbnailUrl":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-connect-to-microsoft-sql-server-remotely-using-teleport-pqjyjmquk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws,microsoft-sql-server,active-directory","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"How to Connect to Microsoft SQL Server Remotely Using Teleport"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-to-connect-to-microsoft-sql-server-remotely-using-teleport-pqjyjmquk#faq","mainEntity":[{"@type":"Question","name":"How do I connect to Microsoft SQL Server remotely using Teleport?","acceptedAnswer":{"@type":"Answer","text":"Set up AWS Managed Active Directory, join an Amazon RDS SQL Server instance and a Linux EC2 instance running the Teleport DB Service to that directory, create a Kerberos keytab file, then start the Teleport DB Service with parameters like uri, ad-keytab-file, ad-domain, and ad-spn. Users connect through mssql-cli or GUI tools like Azure Data Studio via a local database proxy tunnel. daily.dev surfaces practical database-access walkthroughs for engineers wiring up Teleport and SQL Server."}},{"@type":"Question","name":"Why is Windows authentication recommended over SQL Server authentication for SQL Server security?","acceptedAnswer":{"@type":"Answer","text":"Windows authentication is more secure because SQL Server performs no password validation itself and instead trusts credentials verified by Windows, avoiding stored passwords entirely. The default sa account is disabled under Windows authentication, whereas mixed mode enables both methods and requires extra hardening steps like renaming or disabling the sa account. Developers weighing database authentication trade-offs can track security guidance like this on daily.dev."}},{"@type":"Question","name":"What is required on a Linux server to let Teleport authenticate to SQL Server via Active Directory Kerberos?","acceptedAnswer":{"@type":"Answer","text":"The Linux node running the Teleport Database Service must be joined to the Kerberos realm and have a keytab file created so it can obtain Kerberos service tickets from Active Directory. This keytab is referenced via the ad-keytab-file parameter when starting the Teleport DB Service alongside ad-domain and ad-spn settings. Engineers configuring Kerberos-based database access can find setup details like this on daily.dev."}}]} ```