Post reply

User Permission Domain Users

  • July 16, 2008 at 8:25 am

    #129924

    Hi,

    I am asked to restrict some and give extra permission to some user in our database server. when i checked all the users metioned are domain users and connecting using windows authentication.

    Now how would i give database permission to the domain users with out creating logins for them in database.

  • July 16, 2008 at 8:42 am

    #843824

    If I understand correctly the users in question are already connecting to the server using windows authentication and you need to change or add permissions to the database. The best way to handle this is to create database roles which have the required permissions and add the existing server logins to the appropriate role or roles.

    Jack Corbett
    Consultant - Straight Path Solutions
    Check out these links on how to get faster and more accurate answers:
    Forum Etiquette: How to post data/code on a forum to get the best help
    Need an Answer? Actually, No ... You Need a Question

  • July 16, 2008 at 9:03 am

    #843855

    Hi jack,

    Since it is in Mixed mode authentication... that wouldn't help bcoz they are no sql logins for the said users. They are connecting using windows authentication.

  • July 16, 2008 at 9:12 am

    #843865

    Even with Windows Authentication they have to be granted rights to the server. In SSMS under Security -> Logins the Windows Logins would look like domain\user_name. You then can assign those logins to be users of specific databases and put them into specific database roles. This is how SQL Server security works. If they are already connecting then they have to have Server Logins and if they can access any data they must be database users as well.

    Jack Corbett
    Consultant - Straight Path Solutions
    Check out these links on how to get faster and more accurate answers:
    Forum Etiquette: How to post data/code on a forum to get the best help
    Need an Answer? Actually, No ... You Need a Question

  • July 16, 2008 at 9:27 am

    #843884

    Thanks...i got it and updated the same. Created logins for those users and put them under various roles as public,data reader,dbo as per requirement.

    I was in belief that these logins hav administration rights in windows and thus hav adm. rights in sqlserver as well.

    thanz:::)

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply