Re: Control rights

From: Steve Thompson (SteveThompson_at_nomail.please)
Date: 02/06/04 

Date: Fri, 6 Feb 2004 14:51:35 -0500

"Culam" <anonymous@discussions.microsoft.com> wrote in message
news:bcb701c3ece8$69b95fb0$a001280a@phx.gbl...
> I am looking for a better of administer login for our
> users, all on microsoft environment.
> Here is my sistuation:
> Our backup procedure cause the database to override every
> day. This procedure cannot be changed.
> We currently have a scripts that run every night to
> give 'datareader' right to each database.
> We frequently have issue with the script fail and new user
> need to add in manually which sometime cause error.
>
> What is the best pratice for this senario?

I do not understand why you are running a script to add datareader to each
database...

Best practice would involve planning role based security by creating NT
Global groups, placing the global groups in local groups, granting login
permissions to SQL Server to the local groups and database permissions (as
required). Add (or remove) users to the global groups to give (or remove)
the security rights.

Steve

Relevant Pages

  • Re: How to add a user from a trusted domain to a domain local group?
    ... I can do it using the GUI but when I try the following script, ... The trust relationship is one-way ac.siue.edu trusts campus.siue.edu. ... the same forest, you have implicit two-way trusts between the two ... you're making changes to the Global Groups by adding/removing users. ...
    (microsoft.public.scripting.wsh)
  • Script for Accessing NT Global Groups.
    ... I want to populate an Access table with user id's and there Global groups that each user id is a member of. ... I am thinking of using VBscript to run as a module in MS-Access, however I am not very familar with VB script. ...
    (microsoft.public.scripting.vbscript)
  • capture User id and associated NT global groups
    ... I want to populate an Access table with user id's and there Global groups that each user id is a member of. ... I am thinking of using VBscript to run as a module in MS-Access, however I am not very familar with VB script. ...
    (microsoft.public.scripting.vbscript)
  • Group drive mapping.......login scripts
    ... I'm in the process of configuring a login in script for our AD ... I've seen it been done in some companies where the Global Groups are defined ... and in the Global Groups description box the groups drive mapping path is ...
    (microsoft.public.windows.server.scripting)
Quantcast