December 7, 2011 at 8:22 am
I have a weird situation and I am wondering if anyone else has run across this and found a resolution.
According to BOL, the permission required to run freeproccache is ALTER SERVER STATE. I grant this permission to a Windows Group under SQL Server 2008 R2.
A member of that group tries to run freeproccache and gets the message:
Msg 2571, Level 14, State 9, Line 1
User 'guest' does not have permission to run DBCC freeproccache.
I appreciate suggestions.
December 7, 2011 at 8:25 am
Is the user named guest? Or are they in the context of guest in a user database, and perhaps have lost permissions?
December 7, 2011 at 8:46 am
The user is using a windows-based login, theoretically through the authority of the Windows Group, which was granted ALTER SERVER STATE.
One possibility is that the credentials in AD have conflicts. The Windows user may be simultaneously member of other groups that may be causing a conflict, though no message indicates this.
December 7, 2011 at 8:51 am
There won't be a message. You can try digging through the fn_my_permissions function to find this.
Can you grant these rights to a new user, someone that you create for testing that isn't a part of other windows groups?
December 7, 2011 at 9:01 am
That is the right question. I want to set up a generic user and put them into the single group for testing, where there would be no conflicts and I could truly get a representative test. Now I just have to fill out the forms, get the approval, file it in triplicate, go to confession, and the answer will be mine!
If I had an adequate test case, I wouldn't need to post!
December 9, 2011 at 8:54 am
Is the user activating an app role in a database which causes them to lose their original security context?
K. Brian Kelley
@kbriankelley
Viewing 6 posts - 1 through 5 (of 5 total)
You must be logged in to reply to this topic. Login to reply