December 17, 2004 at 12:41 pm
Hi All,
I am having this issue with one Window's Domain Group-- I grant access to the GROUP and the members of the group still can not connect to the database via ODBC connection. I am missing something here...I thought if they had group access / db access to the group, then I don't need to grant INDIVIDUAL access to the user. Does anyone have a clue what I am missing here?
As a workaround, I've granted the individual users of the group read-only access to the database (db_datareader)...
Thanks...Marsha
December 17, 2004 at 1:14 pm
Well, lets see.
Assumptions -
The Windows Group has login rights to the server.
The ODBC connection is set up to use Integrated Security.
The Windows Group has been properly granted access to SQL Server
(I generally browse and select the login rather than typing it in, avoids errors).
The Windows Group has been granted access to the database.
If these assumptions are true, I would think the group would have access.
Steve
December 17, 2004 at 1:24 pm
Yes, I have all that in order...
sid status createdate updatedate accdate totcpu totio spacelimit timelimit resultlimit name dbname password language denylogin hasaccess isntname isntgroup isntuser sysadmin securityadmin serveradmin setupadmin processadmin diskadmin dbcreator bulkadmin loginname
------------------------------------------------------------------------------------ 0x010500000000000515000000BB26FE7B533B82381E317169C3040000 10 2004-12-17 10:06:57.470 2004-12-17 10:50:37.937 2004-12-17 10:06:57.470 0 0 0 0 0 FEI-NT\P.C. Support TestDB NULL us_english 0 1 1 1 0 0 0 0 0 0 0 0 0 DomainNT\P.C. Support
(1 row(s) affected)
December 17, 2004 at 1:26 pm
sorry...domain is DomainNT\P.C. Support..
sid status createdate updatedate accdate totcpu totio spacelimit timelimit resultlimit name dbname password language denylogin hasaccess isntname isntgroup isntuser sysadmin securityadmin serveradmin setupadmin processadmin diskadmin dbcreator bulkadmin loginname
------------------------------------------------------------------------------------ 0x010500000000000515000000BB26FE7B533B82381E317169C3040000 10 2004-12-17 10:06:57.470 2004-12-17 10:50:37.937 2004-12-17 10:06:57.470 0 0 0 0 0 DomainNT\P.C. Support TestDB NULL us_english 0 1 1 1 0 0 0 0 0 0 0 0 0 DomainNT\P.C. Support
December 17, 2004 at 2:38 pm
The only thing that jumps out at me is the periods in the group name. I know the spaces are ok, we have some like that. But maybe the periods throw things off? Might try creating a new group without them and see what happens. Personally, I'd remove the space too.
Steve
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply