Post reply

Windows authentication choosing the wrong access.

  • December 7, 2005 at 10:05 am

    #91034

    Hi, I am changing accounts to log in using windows authentication. I have a user that belongs to two NT groups.

    - PowerUsers

    - CubeUsers

    Both of these NT groups have been granted access to the sql server and have access to my database (MyDatabase).

    In MyDatabase CubeUsers are members of a role that has exec rights on several procedures and PowerUsers are members of the roles db_datareader and db_datawriter.

    When I log in using windows authentication I only get CubeUsers access.

     

     

  • December 7, 2005 at 7:12 pm

    #608311

    When you do a net user <username> /domain from the command prompt the user shows up in both groups? Are you talking domain accounts/groups or local ones?

    K. Brian Kelley
    @kbriankelley

  • December 8, 2005 at 5:29 am

    #608376

    When I enter that it says 'net' is not a recognized as an internal or external command.

    But I have done further research and I think that you are on the correct tract. The SQL security access is correct on our USA servers but wrong on our UK servers. This leads me to believe that it has something to do with the NT group being defined as a local NT group in the USA.

    Unfortunately I am not a heavy in the NT active directory arena but I think that's where my problem is. I'm going to tap some heavy duty NT resources later today to see if I can get this resolved.

    Thank you

     

     

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply