Re: isql uses wrong ID for NTLM authentication under XP

From: Dave Hubbard (dave_at_icc.net)
Date: 11/05/03 

Date: Wed, 5 Nov 2003 12:24:21 -0800

Well, specifically, I login to XP using, say, username
DAVE and domain DOM1 . (These are NT domains, not Active
Directory)

I bring up isqlw (you're right, not isql, sorry).

I then connect to, say, "DB02", which actually is in the
DOM2 domain, using NT authentication. The error I get is:

"...Login failed for user 'DOM1\administrator'"

This has worked for years on W2K machines using the exact
same user account and domains.

No where at any time on this machine have I ever logged
in as 'administrator'.

>-----Original Message-----
>In your first scenario, if this is a basic install and
you
>are using the shortcut in the program group, that's Query
>Analyzer or isqlw. It may not seem to matter but
connecting
>with isql is very different than isqlw as they use
different
>APIs and support different features, functionality.
>If you are connecting using Windows Authentication, it
>should be picking up the credentials, login that you used
>when logging on to the PC you are doing this from. You
>posted earlier that it
>"insists on using our domain administrator account when
>connecting to a SQL 7.0 DB in another domain."
>It's going to use the credentials you used to log onto
the
>network so yes it's not going to use the credentials
from an
>account in another domain.
>In terms of the other part of your post:
>"I cannot get it to 'forget' this. I can't get it to
>use my own credentials when connecting.
>The local domain admin does not have rights to SQL on
>that remote domain."
>It will use the credentials you logged onto the PC with
when
>using Windows authentication so something is missing
here on
>what exactly is happening and what you expect it to do.
>
>-Sue
>
>On Tue, 4 Nov 2003 13:25:35 -0800, "Dave Hubbard"
><dave@icc.net> wrote:
>
>>Sue,
>>
>>Thanks. Although here I'm just running isql
>>interactivly. From a shortcut. Just executing
isql.exe
>>with no arguments, and using the standard "Connect to
SQL
>>Server" dialog box and selecting the "Use Windows NT
>>Authentication" radio button.
>>
>>Interestingly though, if I run it from the command
line,
>>and pass the -E (Trusted Connection) switch, I also get
a
>>failure as if I was logging in as the domain admin.
>>
>>-U and -P seem to force SQL Authentication, which is
>>working, just not our preferred security model.
>>
>>Dave
>>
>>
>>Dave
>>
>>
>>
>>>-----Original Message-----
>>>Without seeing the command you are using, it's hard to
>>say
>>>but try specifying how you want to authenticate using
the
>>>appropriate arguments as listed in books online. If
you
>>are
>>>trying to logon with a SQL login, use -U and -P.
>>>Additionally, you may want to consider using osql
>>instead of
>>>isql since isql does not support some of the features
in
>>SQL
>>>7 and above.
>>>
>>>-Sue
>>>
>>>On Mon, 3 Nov 2003 14:13:49 -0800, "Dave Hubbard"
>>><dave@icc.net> wrote:
>>>
>>>>I just upgraded my machine from W2K Pro to XP. Now,
>>isql
>>>>using NTLM authentication insists on using our domain
>>>>administrator account when connecting to a SQL 7.0 DB
>>in
>>>>another domain.
>>>>
>>>>I cannot get it to 'forget' this. I can't get it to
>>use
>>>>my own credentials when connecting.
>>>>
>>>>The local domain admin does not have rights to SQL on
>>>>that remote domain.
>>>>
>>>>Any ideas? I've searched the registry, and it's not
>>>>obvious where isql is saving this info.
>>>>
>>>>I can connect to servers in my own domain just fine,
>>and
>>>>sp_who clearly shows me connecting as my own domain
ID.
>>>>
>>>>Thanks!
>>>>Dave
>>>
>>>.
>>>
>
>.
>

Relevant Pages

  • RDP login experience with Windows Server 2008
    ... When connecting remotely to a Windows Server 2003 using RDP I was first ... connecting to the server and then asked for my login credentials, ... login from console. ...
    (microsoft.public.windows.terminal_services)
  • Re: RWW
    ... It seems that users are asked for credentials too many times. ... We are then brought to the web page where we enter user name and password and hit enter and then that popup windows appears again ('connecting to mail.mydomain.com'...domainname\user name and then password). ... Steve Foster [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant use WM6 to access network shares
    ... to work correctly except connecting to shared folders on my Windows 2003 ... I seem to have connectivity to the server - I can ping it, ... I try to open the share I get prompted for user credentials. ... Network resource cannot be found or you do not have permission to access the ...
    (microsoft.public.pocketpc.wireless)
  • Re: Cant use WM6 to access network shares
    ... Can get to about any other share on the network. ... about cannot find or no permissions. ... > to work correctly except connecting to shared folders on my Windows ... > I try to open the share I get prompted for user credentials. ...
    (microsoft.public.pocketpc.wireless)
  • Re: How secure is the vanilla Server 2003 VPN?
    ... All you have to do is overload the bandwidth on the line connecting to ... VPN client using the connection manager tool so users can't cache their ... the credentials used on web sites from IE that caches them (Hotmail, Yahoo Mail, ... Home User firewall boxes does a somewhat reasonable job of ...
    (microsoft.public.windows.server.networking)