SQL 7.0 & SQL 2000 - Windows Authentication Problem



Hi,

I changed some SQL security and now some users cannot get in.

UserA is in Domain GroupA

UserB is in Domain GroupA and Domain GroupB

Domain GroupB is in server's local Administrator's group

In SQL Server,

Builtin/Administrators has full SQL Admin priv.
GroupA has specific privileges granted on one database.

Both UserA and UserB run an app that accesses the database with a
DSN'less connection using Windows Authentication and both can see the
database through Enterprise Manager.

I created Domain GroupC, granted GroupC limited privileges on the
database, removed GroupB from local Administrators group, and denied
GroupB and BuiltIn/Administrators all access in SQL Server.

Now, UserA can still access the database and Enterprise manager
but UserB gets a login failed. State 28000 error 18456.

I granted GroupC full SQL Admin priv - no change.

I added GroupB back in to the Local Administrator's group and went back
in and permited both GroupB and Builtin/Administrators through
Enterprise manager and UserB is still unable to login.

It is like something from original connection was 'cached' somewhere,
but I am not sure where or how to clear it.

Any Ideas would be MOST appreciated.

.



Relevant Pages

  • SQL 7.0 & SQL 2000 - Windows Authentication Problem
    ... I changed some SQL security and now some users cannot get in. ... UserB is in Domain GroupA and Domain GroupB ... GroupA has specific privileges granted on one database. ...
    (microsoft.public.sqlserver.security)
  • Re: Cant login to SQL Server
    ... exec sp_addlogin 'USERA', 'xxxxx', 'MyDatabase' ... EXEC sp_grantdbaccess 'USERB' ... with the newly created login USERB. ... There is one more thing you need to be aware of: in SQL 2005, ...
    (microsoft.public.sqlserver.security)

Quantcast