Connection between Active Directory, Windows Groups, Logins and Users

  • Greetings all.

    For the first part of my question, I may be in the wrong place - if this is the wrong forum to ask this question please accept my apologies and I'll ask it elsewhere.

    How difficult is it to install and set up Active Directory on a test server? I have a client who wants to use Active Directory with SQL 2005 and when I hear Active Directory all I think of is the yellow pages. I was hoping to be able to just install it on my test Windows 2003 Server box so that I could play around with it a bit, but honestly I'm not even sure what it is. All I know is you can assign users to groups and give them the same permissions.

    Second, how similar are Active Directory and normal Windows Groups? On my test Windows 2003 Server box I can go into Computer Management, System Tools, Local Users and Groups and create groups, then create users as members of those groups. What confuses me though is that if I create a SQL 2005 Login for the group, I can only create a User for one user in the group, which to me seems to kind of defeat the purpose of having several users share rights.

    So getting to the point:

    1. If you have a Windows Group set up and you want all Windows Users in that group to have the same rights in the database (using Windows Authentication of course), do you still have to create individual logins for every user in the Windows Group, and then assign them rights one at a time?

    2. Is Active Directory something that can make it easier to give all users in a group the same rights?

    3. Is Active Directory something that can be easily installed on a test server for experimentation?

    Much appreciating any help!

    DTXCF

  • Here is a definition of AD:

    http://en.wikipedia.org/wiki/Active_Directory

    As far as setting up an AD network on a test server (or group of test servers), configuring a domain controller and setting up a basic AD structure is not hard, but it is something you will need some training, a really good set of instructions, or an actual network administrator to do.

    As far as using AD for security, that's pretty much the standard in the workplace today.

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply