URGENT---Why I adding new user failed?

Question

Post reply

URGENT---Why I adding new user failed?

halifaxdal

SSCoach

Points: 19741
More actions
February 19, 2010 at 9:26 am

#139025

Hi Folks,
I need to add some logins in my database, I have no problem finding them in the Login -New --> Search
But I got this error message:
Windows NT user or group 'INTL\Rtxie' not found. Check the name again. (.Net SqlClient Data Provider)
Why?
Although I am not in the INTL domain, but I am in a trusted domain, and I have no problem adding any other logins from the INTL domain, was this ID created improperly? I guess so but how can I prove it and ask them to correct it?
Thank you very much.

Viewing 15 posts - 1 through 15 (of 27 total)

You must be logged in to reply to this topic. Login to reply

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 1

You need to check with your network or server admins, or who ever is responsible for creating the Windows accounts.

Steve Jones - SSC Editor SSC Guru Points: 736162 More actions · Answer 2

I would double check this with the admins, as Lynn mentioned. I might also try to add the user to a Windows folder with permissions and make sure that box can see the other domain without issues.

halifaxdal SSCoach Points: 19741 More actions · Answer 3

I already checked with AD admin, what they told me is this account is no difference than other account. but I am sure there is some difference.

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 4

Get the admin with you as you attempt to add the user in question. The problem you are encountering is not specific to SQL Server but its interaction with the OS.

halifaxdal SSCoach Points: 19741 More actions · Answer 5

The account is a newly created account, but I am able to log in using that account. Since this is a new account, does that mean it needs time to be recognized on other domain? this would sound ridiculous to me but I am just hanging here now.

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 6

My Windows Server knowledge is old, but it is possible you may need to wait until the login info as replicated with the domain. Beyond that, as I said, show one the system/network admin the problem you are encountering. They should be able to assist.

halifaxdal SSCoach Points: 19741 More actions · Answer 7

ok, i believe THIS IS A SQL PROBLEM, INSTEAD OF ACTIVE DIRECTORY PROBLEM

we know Exec xp_logininfo 'intl\abc'

will tell you if the user is a valid user

for this particular user abc, it returns nothing, which means the user's access was denied.

I even tried to give the users 'sysadmin' role, it still returns nothing. That's not right?!

for another user, it returns:

Msg 15404, Level 16, State 11, Procedure xp_logininfo, Line 62

Could not obtain information about Windows NT group/user 'INTL\RTxie', error code 0x534.

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 8

Have you checked the permissions assigned to the users? Is everything in the same domain?

Do you have the necessary permissions to access the AD?

Okay, done shooting in the dark, need to go get my daughter from school.

Steve Jones - SSC Editor SSC Guru Points: 736162 More actions · Answer 9

I'm not sure it's a SQL problem. I think it's a security problem at this point. SQL just queries AD, if I remember correctly, under the service account permissions. Is it possible that this machines doesn't have rights to query the other domain?

halifaxdal SSCoach Points: 19741 More actions · Answer 10

Is it possible that this machines doesn't have rights to query the other domain?

Thanks Steve, how do I determine this? it has no problem adding other users from other domains, and as you can see, even for the same domain, it sometimes works.

One thing I don't understand is: why I am able to search the login but the login fails to be added for the reason "not found"?

Lynn Pettis SSC Guru Points: 442467 More actions · Answer 11

What version of windows is being used? IIRC Windows 2003 and newer are actually case sensitive with regards to user names. (But then I may be wrong.)

halifaxdal SSCoach Points: 19741 More actions · Answer 12

Lynn Pettis (2/22/2010)
What version of windows is being used? IIRC Windows 2003 and newer are actually case sensitive with regards to user names. (But then I may be wrong.)

It's Windows 2003 server Enterprise edition sp2

Rudyx - the Doctor SSC-Forever Points: 43695 More actions · Answer 13

I would first try to execute:

exec sp_validatelogins

If this does not produce any results the next step is to retry xp_logininfo:

exec xcp_logininfo 'intl\abd

RegardsRudy KomacsarSenior Database Administrator"Ave Caesar! - Morituri te salutamus."

Rudyx - the Doctor SSC-Forever Points: 43695 More actions · Answer 14

my browser just went 'whack' ...

let's try some variations of xp_logininfo now:

exec xp_logininfo 'intl\abc' --> we know this fails

How about some variations to take into account character set and case sensitivity ...

exec xp_logininfo 'INTL\ABC'

exec xp_logininfo 'Intl\Abc'

exec xp_logininfo 'INTL\abc'

exec xp_logininfo 'INTL\Abc'

I only mention this because I have seen this issue when maitnaining NT Authority System and Builtin Administrators !

RegardsRudy KomacsarSenior Database Administrator"Ave Caesar! - Morituri te salutamus."