Active Directory

Question

Post reply

Active Directory

JKSQL

SSCrazy Eights

Points: 8481
More actions
April 19, 2007 at 8:13 am

#370602

I have been having an on and off issue with Active directory and SQL permissions. I have several SQL groups set up on the domain controller. When I add some users the security seems to transfer to SQL correctly. They will be able to access databases with the permissions I gave. Others that get set up do not seem to work. I have to add the individual manually to SQL. Then they will be able to access to the db's needed. Any reason why Active directory does not seem to be working in SQL. Is there something I need to set up?

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

Eric Peterson Hall of Fame Points: 3192 More actions · Answer 1

Ok, several things here to look at...many of which I am sure that you have already done....

Can the account log into your sql server box directly.....if not it has not synched with the domain yet
Is rpc running? if not start it and let the ids synch.
is the timestamp more than an hour different from the domain controler. Problems with rpc and the sync can occur and strange results will be found.
sql server login setup.....are you expecting the id to come in as a user or domain admin?
the sql server name must include the domain name with the user account or it thinks it is a local account.

Someone chime in to anything I have missed...and let us know what the solution is.

Eric

JKSQL SSCrazy Eights Points: 8481 More actions · Answer 2

1. When I added the user to the SQL box with domain\Name the person gets the permissions. If I go to the domain controller it does not seem to replicate to the box

2. rpc is running and the ids are synched

3. No

4. Not sure what you are saying

5. The groups have the domain in there.

We just can not figure it out over here why sometimes it works for people other times I cannot relie on the groups

Eric Peterson Hall of Fame Points: 3192 More actions · Answer 3

#4 I was refering to the BUILTIN\Administrators login.

Have you tried booting the DomainControler and the SQL box????

Eric

JKSQL SSCrazy Eights Points: 8481 More actions · Answer 4

No I can not boot those. Those are both under serious activity. I think I have tried that before and it worked. I think it may be a synce thing. I just can not put my finger on it.