Post reply

Permission Issue

  • October 14, 2008 at 8:45 am

    #131715

    We are having One group in active directory: If suppose group name is GroupA

    In that group we are having three users...UserA...UserB...and UserC.

    Now, we are giving read and write permission to groupA to our sql server database with default database master but it fails.

    The same way(read write with default database master) if we give permission to UserA or UserB or UserC then it works...

    I don't have any idea why it's not working with Active Directory groups.Anyone of you do have any idea on this issue.

    Thanks

  • October 14, 2008 at 1:20 pm

    #884851

    Please reply on this...This is a very critical issue in production..

    If I give permission to active directory groups on our database then it is not working....

    For a temporary fix...I have just given direct access to that windows user on our database.

  • October 14, 2008 at 1:35 pm

    #884856

    RPSql (10/14/2008)

    We are having One group in active directory: If suppose group name is GroupA

    In that group we are having three users...UserA...UserB...and UserC.

    Now, we are giving read and write permission to groupA to our sql server database with default database master but it fails.

    The same way(read write with default database master) if we give permission to UserA or UserB or UserC then it works...

    I don't have any idea why it's not working with Active Directory groups.Anyone of you do have any idea on this issue.

    Thanks

    In SQL 2000, MS said that best practice was to:

    - Create a Global Group,

    - Put Windows users in the Global Group,

    - Put that Global Group in a Local Group on the server,

    - Give the Local Group SQL permissions

    This is called AGLP (Account->Global group->Local group->Permissions)

    I assume it's still BP in 2005 ? Is that what you have ? Or are you assigning SQL permissions directly to the Global Group ?

  • October 15, 2008 at 8:06 am

    #885228

    We are not having any global group. We only use local group in active directory, which is only for one domain.

    In sql server we give permission to that group. But one of the user of that group still have issue connecting sql server. If we give him direct access on sql server then it is fine. But we are having problem by giving permission to that active directory group.

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply