September 1, 2010 at 5:31 pm
I have bunch of users for whom i have given Read/Write/ddl_admin access , now i have to give them only read access in which i have to exclude some groups(windows) and these groups should still have
Read/Write/ddl_admin access, how do i do that in a single step, is there any script on this forum?
September 1, 2010 at 5:46 pm
Not entirely sure about a scripted method, but a brutish force way to deal with it is to just add the windows groups as if they were windows users, give them the required access, and then set all your users to data_reader access, with no explicit deny's.
They'll take the highest level access they can get between the group and user settings.
Past that, you're looking at a per database looped script that will detect if it's an NT user in the master database login information and then adjusting local permissions.
Never stop learning, even if it hurts. Ego bruises are practically mandatory as you learn unless you've never risked enough to make a mistake.
For better assistance in answering your questions[/url] | Forum Netiquette
For index/tuning help, follow these directions.[/url] |Tally Tables[/url]
Twitter: @AnyWayDBA
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply