May 17, 2004 at 2:49 am
WI am trying to grant access to a database using a Windows Domain group. The way we normally go about this is to add all db users into the group and then grant permissions to the group in SQL ... the users inheriting the permissions.
However, I have a problem on one site where this is not working... If the individual windows users are added into SQL Server, everything works fine. Try to use the group and the DSN fails to connect (login failed for user ...).
Does anyone out there have any ideas? The system is working at the moment but it would be handy to know WHY this is occurring. CHeers muchley in advance for any help you can offer,
Mat
May 17, 2004 at 5:48 am
Is this box a part of the domain and is the group account local or on the domain itself?
May 17, 2004 at 5:52 am
check if the group has Deny access setting in Authentication.
EM/Security/Logins, in the details panel, right-click the group and click properties.
May 17, 2004 at 6:18 am
SQL Server is sitting on the domain controller... The group is setup in Active Directoryt Users and Computers and the indiviual users made members of the group.
When added into SQL Server, the domain group is selected and is set to Grant access to the database with db_datareader and db_datawriter priveleges.
At the moment, I have added the domain users into SQL logins list and this works, however, the preferred way to grant access is through the group as this makes adding / removing users much easier.
The setup is identical to many other systems we have setup, all of which work as expected.
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply