NT Authentication Problem
-
Hi everyone
I have a problem with my pre-production server's NT users. I do a restore every night and next morning I give permissions to developers who need to have some pre-prod tests. I give permissions to developers' NT accounts.
But
when I set a user as db_ddladmin this NT user can alter existing db objects but cannot create a new one. I tested almost everything 
After that I set the users to dbo but strange! it didn't work.If I give an NT user db_denydatareader it affects immediately but the dbo/create permission never applies
Waiting for your valuable helps
-
This was removed by the editor as SPAM
-
Do they receive errors when the attempt to create an object?
NO?...
Are you sure they're not creating them under their own schema? A member of db_owner has to explicitly specify the object owner, otherwise the object is created under their schema.
YES?...
Have you checked sp_helprotect to verify that they've not been denied the create procedure permission?
-
Thanks for the reply Lance
Well the error that I receive is so-known "CREATE Table Permission Denied on db ..." error.
Even if the user is explicitly states [dbo].[table_name] it is not possible to break.
I dropped the user even the login but didn't work.
I checked the sp_helprotect for the user, the group this user belongs to even public account.
I've spent about half an hour over the phone with Microsoft but we both couldn't fidn the problem.
The funny thing that I found after days is: someone has run this years ago "DENY CREATE PROC TO public" and "DENY CREATE TABLE TO public"
The strange thing is this is not shown within the results of "EXEC sp_helprotect [public]" Strange!
Thank you all
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply