thanks for the headsup, Florian!

If anyone finds this down the road, found the *easy* solution...

SELECT SUBSTRING(master.dbo.fn_varbintohexstr(sid),0,88) from master..syslogins

Here is my issue, in my vb.net app, it does a query from Syslogins/users. When the app runs this query, it tries to throw each column in a variable,...

Ah, I seen that funct too. I was hoping to do it w/ soley a sql query.

I'm grabbing all the data from these systems tables from all the sql...

Actually...here is what I found.. Which, brings up another Q!!

So, the ID path is thru "Domain\DomainUsers" and it has ability to login to the server, but no DBs.

Sooo, here is...

also, i do not see that login or group members in that group

The permission path is pointing to "domain\domain users''.....

K. Brian Kelley (2/4/2009)

---

How about a member of a domain group that has been given login rights? Or a member of BUILTIN\Administrators (the local Administrators group on the server) if...

That very well might be. I am yet to test this situaltion in 2005, but I'm 99% sure that was the probably the main reason to break it out.

Right, but that just really is confusing why it's handled this way in MSSQL. Especially allow anyone w/in AD to own the object regardless if they exist on the...

The grant err was a hiccup on my end when I was apply privs. you would have to remove...

--grant execute on usp_accounts to cbtest2

But, the privs are in other...

..how would that be since they are all system tables...

For stored procs, is it possible for the privileges to be help at the SP level.

Meaning, say I have DATABASE1 and...

Done.

I don't think it is possible w/o apply the end user to access to each db and select on the objects w/in the stored proc......

Also, to Add. This is for SQL 2000.

I agree that it should be the required by the app, but I would imagine it should also be applied by the security group.

It would all point back...