Re: multiple domain access

From: Jasper Smith (jasper_smith9@hotmail.com)
Date: 11/25/02 

From: "Jasper Smith" <jasper_smith9@hotmail.com>
Date: Mon, 25 Nov 2002 16:28:59 -0000

You could use local groups on the sql server and add
your global groups to that. Thus you can create a local
group called groupA - add the 2 domain global groups
to it and grant access to the local group only. 

-- 
HTH
Jasper Smith (SQL Server MVP)
"Ian" <ian.mackenzie@lmco.com> wrote in message
news:1590801c2949d$65f7f340$89f82ecf@TK2MSFTNGXA01...
> Greetings;
> We have a large, complex enterprise, made up of several
> domains. In each domain, we have a global group of the
> smae name,i.e. DOMAIN1/groupA, DOMAIN2/groupA. SQL 2000
> sets up security and database access for the first SQL
> account created for these groups just fine. However, when
> I go to create the next doman group login, SQL replies
> politely but firmly that that user "groupA" already
> exists. SQL creates the account, but I can't grant access
> to the same database. I realize this will not be such a
> problem when Active Directory is fully implemented, but
> what can I do for now (other than rename the global
> groups)?? Any reply is welcome.

Relevant Pages

  • Re: Everyone, Users, and Guests
    ... Domain Guests = anonymous logons (the Guest account is ... Domain Users = domain's authenticated users (a member of ... Global Groups go into Local Groups, ... Local Groups are given permissions to resources. ...
    (microsoft.public.win2000.security)
  • Re: I cant put a Group in a Group ??
    ... Global Groups Cannot be added to Local Groups ... Have users accounts and global groups as members. ... Have users, global groups, and universal groups from any domain as ...
    (microsoft.public.windows.server.active_directory)
  • global local security group question
    ... What's the proper way to setup security for a shared data directory? ... In AD, there are global groups, i.e. Accounting_Read, Accounting_Full, ... should I create local groups in AD and assign the ... Or should I create groups on the file server itself and assign ...
    (microsoft.public.windows.server.active_directory)
  • Re: Add the HWS Web Service user to the IIS_WPG and STS_WPG Windows groups
    ... If you're using local groups (such as on a developer machine, ... For the SQL requirement, start the SQL Server Client Network Utility ... Meet and interact with key BizTalk Server program managers, developers, and ...
    (microsoft.public.biztalk.general)
  • Re: Group Scope Question
    ... that domain local groups can only be used within the domain. ... will need to use global groups to give users access to resources in another ... Domain local groups are best used in access control lists ... I plan on having a Domain Controller in each site to ...
    (microsoft.public.win2000.security)