RE: Linked Server
- From: Buck Woody - Microsoft SQL Server Team <BuckWoodyMicrosoftSQLServerTeam@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 9 Feb 2007 07:42:00 -0800
Try here:
http://support.microsoft.com/kb/925001
"CLM" wrote:
I posted this in another forum and got no response, so I'll try here:.
I’ve got two servers, say ServerA and ServerB, that are Windows 2000 Adv'd
Server SP4 & Sql Server 2000 SP4 . We are going to have to go to a tighter
security enviroment where each user has their own login for auditing
purposes. What would be ideal from manageability is for each user to have
their Windows login mapped into a Domain level group, call it domain\groupa.
This works except for one thing: I cannot get the linked servers to work.
Actually, I can get a painful version of it to work: I can map a windows
login to both servers, and then run the following on ServerA:
sp_addlinkedsrvlogin 'serverb', 'false', 'domaina\winlogina', 'sa',
'sapasswordforserverb'
This works but defeats the whole purpose of using the groups! So then I try
the following so I can use the domain level group acct:
EXEC sp_addlinkedsrvlogin 'serverb', 'false', ‘domaina\groupa, 'sa', '
sapasswordforserverb '
The command succeeds and shows up in the linked server properties security
tab. But when I run a query
select * from serverb.admindatabase.dbo.smalltable
from servera through the linked server it fails with the following:
“Server: Msg 18456, Level 14, State 1, Line 1
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'”
Why does this fail? It's important to note that the domaina\groupa group
account is mapped into both servers as system administrator and it is a
domain level account! Why can I get this to work with a regular windows
account that is NOT domain level but not with an administrative domain
account??
If I can’t this to work, it’s going to create a big administrative headache
for me…And, btw, my goal is not to use a domain level administrative account
with regular logins - I'm just trying to get this to work.
- Prev by Date: Re: how to get all the user permission in 1 query?
- Next by Date: Stored Proc with unlimited parameters
- Previous by thread: Re: SQL 2005 Express security
- Next by thread: Stored Proc with unlimited parameters
- Index(es):
Relevant Pages
|
