Re: Restricting domains from which a user can login using SQL Server login

From: Hari Prasad (hari_prasad_k_at_hotmail.com)
Date: 07/20/05

  • Next message: Jasper Smith: "Re: Revoke/deny SOX issue" 
    Date: Thu, 21 Jul 2005 02:08:10 +0530

    Hi,

    All you have to do is give access to only groups/users from the domain you
    need to give previlages. But for SQL Server authentication you may not
    be restrict.

    Post this query in Windows 2000 groups. Probably you will be able to
    restrict domain access in OS / Active directory level.

    Tahnks
    Hari
    SQL Server MVP

    "Joubert Nel" <j@j.j> wrote in message
    news:ex7jWIWjFHA.3544@TK2MSFTNGP15.phx.gbl...
    > Hi Hari,
    >
    > Is it possible to configure the Windows box on which SQL Server runs to
    > only
    > allow connections from machines in a specific domain/domains?
    >
    > Thanks
    > Joubert
    >
    > "Hari Prasad" <hari_prasad_k@hotmail.com> wrote in message
    > news:uLVGxAWjFHA.3656@TK2MSFTNGP09.phx.gbl...
    >> Hi,
    >>
    >> You can not restrict the access if the users from other domain have
    >> access
    >> to the SQL Server. Only way to restirct is to remove / Deny their
    >> logins from SQL Server. See the system stored procedure sp_denylogin to
    > deny
    >> a group or user.
    >>
    >> Thanks
    >> Hari
    >> SQL Server MVP
    >>
    >> "Joubert Nel" <j@j.j> wrote in message
    >> news:OC2g7RUjFHA.3784@tk2msftngp13.phx.gbl...
    >> > Hi all,
    >> >
    >> > We are using mixed mode authentication (users connect to SQL Server
    > using
    >> > a
    >> > SQL login for historical reasons).
    >> >
    >> > We want to setup SQL Server / Windows Server to only allow users from
    >> > specified domains to be able to login with this SQL login.
    >> >
    >> > How can we configure this?
    >> >
    >> > Regards
    >> > Joubert
    >> >
    >> >
    >>
    >>
    >
    >

  • Next message: Jasper Smith: "Re: Revoke/deny SOX issue"

    Relevant Pages

    • Re: master db
      ... > In this case you can have a common database user and keep a application ... >>> It is always better to create SQL Server Logins rather than ... >>> Hari ... >>> SQL Server MVP ...
      (microsoft.public.sqlserver.clients)
    • Re: Denying Remote SQL Server Access
      ... You simply restrict the IP address going to the internet ... Where is your SQL Server? ... Software or hardware firewall? ...
      (microsoft.public.sqlserver.security)
    • Re: Query Analyzer Connect Cption
      ... An user get access to SQL Server only after successful authentication. ... you restrict the user by changing the password or removing ... the user id from SQL server will ultimately restrict him not to create a new ... Query analyzer session with a different user id. ...
      (microsoft.public.sqlserver.security)
    • Re: how to restore
      ... There was typo error in Jens post. ... Hari ... SQL Server MVP ... >>> May I restore them into my new sql server? ...
      (microsoft.public.sqlserver.clients)
    • Re: Error 5123 Cannot Attach DB
      ... I will try the stopping of SQL Server and do the file move/renames after ... "Hari Prasad" wrote: ... >> I cannot copy the files as I get the same lock error. ... >>> SQL Server MVP ...
      (microsoft.public.sqlserver.connect)