Re: troubles adding domain group as database role member

From: Jasper Smith (jasper_smith9_at_hotmail.com)
Date: 02/23/04


Date: Mon, 23 Feb 2004 19:13:16 -0000

In Enterprise Manager, if you view the users folder of the database in
question - does the domain group show up as "via group membership" or as
"Permit" in the Database Access column. If you explicitly grant access to
the database to the domain group using sp_grantdbaccess before then using
sp_addrolemember does it work ?

-- 
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Timo" <t@anonymous.com> wrote in message
news:MPG.1aa2a4e2886e58799896b6@msnews.microsoft.com...
> We're having no trouble setting up Windows Authentication on a SQL
> Server 2000 server running under Windows 2003 Server as long as we use
> individual domain users, but we cannot get things working with domain
> groups. We're using ActiveDirectory.
>
> We create the domain group, add domain users to it, grant login to the
> group, and then add the domain group to a role using sp_addrolemember
> (rolename, domaingroupname). However, the role's object-permissions are
> not being conferred upon the individual members of the domain group.
>
> I'd be grateful for a link to some step-by-step instructions, to make
> sure we're doing everything required. Anything special we need to do to
> make SQLServer aware of the domain groups under ActiveDirectory?
> Thanks!
> Timo
>
>
>


Relevant Pages

  • Re: Adds the group to the database But Security EM
    ... > I view the database with SQL Server Enterprise Manager in the database and ... > the SQL Server security domain group. ... --grant group permissions to connect to SQL Server ...
    (microsoft.public.sqlserver.security)
  • Re: Problem with sp_tables_rowset;2 (Domain Users vs Domain Groups)
    ... then you will need to make domain logins be users in the database. ... You should not need to grant any rights to the users, ... > This app works fine if we use a domain user and grant it access to the ... > db - instead the user is member of a domain group and this group is added ...
    (microsoft.public.sqlserver.programming)
  • Re: Problem with sp_tables_rowset;2 (Domain Users vs Domain Groups)
    ... then you will need to make domain logins be users in the database. ... You should not need to grant any rights to the users, ... > This app works fine if we use a domain user and grant it access to the ... > db - instead the user is member of a domain group and this group is added ...
    (microsoft.public.sqlserver.security)
  • Problem with sp_tables_rowset;2 (Domain Users vs Domain Groups)
    ... Recently we bought a 3rd party application that connects to our database ... This app works fine if we use a domain user and grant it access to the ... db - instead the user is member of a domain group and this group is added to ... I tracked that the app uses an sp to ...
    (microsoft.public.sqlserver.security)
  • Problem with sp_tables_rowset;2 (Domain Users vs Domain Groups)
    ... Recently we bought a 3rd party application that connects to our database ... This app works fine if we use a domain user and grant it access to the ... db - instead the user is member of a domain group and this group is added to ... I tracked that the app uses an sp to ...
    (microsoft.public.sqlserver.programming)