Re: multiple domain access

From: Ryan LaNeve (ryan@nolanevespam.com)
Date: 11/26/02


From: "Ryan LaNeve" <ryan@nolanevespam.com>
Date: Tue, 26 Nov 2002 01:59:53 -0500


"Ian" <ian.mackenzie@lmco.com> wrote in message
news:1590801c2949d$65f7f340$89f82ecf@TK2MSFTNGXA01...
> Greetings;
> We have a large, complex enterprise, made up of several
> domains. In each domain, we have a global group of the
> smae name,i.e. DOMAIN1/groupA, DOMAIN2/groupA. SQL 2000
> sets up security and database access for the first SQL
> account created for these groups just fine. However, when
> I go to create the next doman group login, SQL replies
> politely but firmly that that user "groupA" already
> exists. SQL creates the account, but I can't grant access
> to the same database. I realize this will not be such a
> problem when Active Directory is fully implemented, but
> what can I do for now (other than rename the global
> groups)?? Any reply is welcome.

While Jasper's suggestion will work, an alternative is to just prefix the
name when adding it to the database (which in my experience, it does
automatically when adding the group via EM). Once the login has been added
to the server itself, open the properties for it and select the "Database"
tab. Find the database you wish to grant access to, check the box, and then
change the default user name from "groupA" to "DOMAIN2\groupA", or whatever
is appropriate. We've added several "Domain Users" groups for various
domains all to the same databases by doing this. Again - EM should prefix
the group automatically if a group with the same name has already been added
to the database.

Good luck,
Ryan LaNeve



Relevant Pages

  • Re: SQL open error
    ... > open a database in my C## program as before. ... SQL Server is configure to accept ... with admin priviledges, you don't have to grant access, as admins are ...
    (microsoft.public.data.oledb)
  • multiple domain access
    ... we have a global group of the ... sets up security and database access for the first SQL ... SQL creates the account, ...
    (microsoft.public.sqlserver.security)
  • Re: Unable to view all procedures in management studio
    ... Did you try on different database/new database? ... If you run "GRANT VIEW ANY ... I manage access to our databases via global group. ... However in management studio none of the developers can see any ...
    (microsoft.public.sqlserver.clients)
  • Re: SQL User permissions
    ... Did you add this login to sysadmin server role? ... grant access to the db you would want ... I am new to SQL and I want to setup a database off my SQL server that ...
    (microsoft.public.sqlserver.security)
  • Re: IIS6 to access SQL db
    ... You need to grant access to the user in the database. ... Kristofer Gafvert - IIS MVP ... > I'm trying to setup iis to access a sql db which is in a separate machine in the same domain. ...
    (microsoft.public.inetserver.iis)