Keeping Domain & SQL Access In Sync

From: Colette (Colette_at_discussions.microsoft.com)
Date: 07/19/05


Date: Tue, 19 Jul 2005 07:07:09 -0700

Does anyone know of a sample script I could get access to that would
automatically compare disabled/deleted domain accounts to the SQL Security
Logins and keep them "in sync" without any interaction from the SQL
administrator? We're wanting to eliminate the need of sending manual
notifications to the SQL administrator of terminated employees and running
the sp_denylogin. Instead, we want to just create a script that would go out
to all of our SQL servers and automatically remove accounts no longer active
in the domain itself. Does Active Directory provide any tools to do this?

Any help would be greatly appreciated.

Thanks.

Colette


Quantcast