Re: SQL 2005 ALTER ANY LOGIN trouble

Thank you, Erland, for your response!

That was my blunder indeed. Using 'as user' instead of 'as login'. (one
would expect an exception though, something about a missing user..)
It works OK with domain accounts, too.

Oleg

"Erland Sommarskog" <esquel@xxxxxxxxxxxxx> wrote in message
news:Xns98B63A1E1674Yazorman@xxxxxxxxxxxx
Ol Boldyrev (olboldie@xxxxxxxxx) writes:
That's what I'm doing:
1.
grant alter ANY login to [Domain\User]
which executes successfully. Then strange things begin to happen, .

And you were in master when you did this?

Was Domain\User added explicitly as login prior to this, or did it
have implicit access through a group?

For what it's worth, I was successful with this:

create login alteranylogin with password='cccccc'
grant alter any login to alteranylogin
execute as login = 'alteranylogin'
create login alteranylogin2 with password='cccccc'
revert

But this was an SQL login. Running on my home machine, it is somewhat
difficult to test with domain users.

--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx


.

Relevant Pages

  • Re: Unexpected Login Screen When Accessing SQL Data Via .NET Intra
    ... >> data and the SQL Server is on the same server. ... >> My problem is that one user has started getting a login popup ... >> right in via Windows Authentication like everyone else and like they ...
    (microsoft.public.sqlserver.connect)
  • Re: cannot acees two databases as owner
    ... it does not matter you are a member of the ... the sysadmin fixed server role or if there is no any other Login which is ... group if it's a domain) and you can login to your SQL Server with, ...
    (microsoft.public.sqlserver.setup)
  • Re: Database security design with ASP.net and form-based authentication
    ... Since you already have forms-based security, why not use a single SQL login ... for all database access? ... data entry, guest/view only, admin, report viewer. ... so I'm using SQL Server authentication. ...
    (microsoft.public.sqlserver.security)
  • Re: Credentials not being passed with remote access
    ... allowed windows authentication to work, ... I had assumed johnx was a domain user rather than a local Windows account. ... johnx was set up as a local login on sql server. ...
    (microsoft.public.sqlserver.security)
  • Re: No db access after publishing web site
    ... GRANT UPDATE TO ... If I detach and attach this database on a different PC (according that PC ... Cannot open database "pago" requested by the login. ... Are you detaching/attaching the SQL Server Express database correctly ...
    (microsoft.public.dotnet.framework.aspnet)