Post reply

Xp_logininfo

  • June 1, 2010 at 11:17 pm

    #219544

    From SQL Server, can i see who all the windows users and groups has admin privilege??

    I tried this one and it is working fine in 2008

    Xp_logininfo 'Builtin\Administrators',members

    account name type privilege mapped login name permission path

    CSD\u1 group admin CSD\Admins-India Builtin\Administrators

    CSD\Domain Admins group admin CSD\Domain Admins Builtin\Administrators

    CSD\ramesh user admin CSD\ramesh Builtin\Administrators

    Secondly, I used

    Xp_logininfo

    account name type privilege mapped login name permission path

    CSD\ramesh user admin CSD\ramesh NULL

    BUILTIN\Administrators group admin BUILTIN\Administrators NULL

    NT AUTHORITY\NETWORK SERVICE user admin NT AUTHORITY\NETWORK SERVICE NULL

    NT AUTHORITY\SYSTEM user admin NT AUTHORITY\SYSTEM NULL

    But when i tried to use the below command to know who all the members falling in below two groups but am getting an error

    Xp_logininfo 'NT AUTHORITY\SYSTEM',members

    go

    Xp_logininfo 'NT AUTHORITY\NETWORK SERVICE',members

    go

    /*

    Msg 15404, Level 16, State 5, Procedure xp_logininfo, Line 42

    Could not obtain information about Windows NT group/user 'NT AUTHORITY\SYSTEM', error code 0x8ac.

    Msg 15404, Level 16, State 5, Procedure xp_logininfo, Line 42

    Could not obtain information about Windows NT group/user 'NT AUTHORITY\NETWORK SERVICE', error code 0x8ac.

    */

    Can anybody figure out why it is saying so??

  • June 2, 2010 at 2:40 am

    #1175148

    Try executing

    Xp_logininfo 'NT AUTHORITY\SYSTEM'

    In the type you will come to know whether it is group or single user account.

    Nag

    Nag
    ------------------------------------------------
    How to get the best help on a forum

    http://www.sqlservercentral.com/articles/Best+Practices/61537

  • June 2, 2010 at 7:15 am

    #1175263

    To add to Nag's response, you'll see that these accounts are user accounts and not groups. Therefore, there aren't any members.

    This link has a brief description of the various service accounts:

    http://msdn.microsoft.com/en-us/library/ms143504.aspx

    HTH,

    Cindy

  • June 2, 2010 at 11:21 am

    #1175456

    This has to be executed on the source sql server and take the output and execcute it on the target sql server. Right??

    Correct me if am wrong!!!

    Thanks.

  • June 2, 2010 at 11:34 am

    #1175462

    Are you referring to the command - sp_help_revlogin ? This command is used to copy logins from one server to another. There is no "target server" for xp_logininfo.

    Cindy

  • June 2, 2010 at 11:42 am

    #1175468

    Hi Civy,

    I replied to the wrong post.

    Thanks 🙂

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply