Re: SQL 2000 Windows Authentication using AD Groups

On Apr 16, 11:03 am, "Sean" <sean.i...@xxxxxxxxx> wrote:
On Apr 16, 8:23 am, "Sean" <sean.i...@xxxxxxxxx> wrote:





Please bear with me as I'm a bit new to SQL (although comfortable withAD).

SQL 2000 running on Server 2k3 R2
One Active Directory domain also Server 2k3 R2
Users are connecting to DB Tables using Access 2003

Currently our users have access to a database through windows
authentication. Eachuserhas theirADuseraccount setup in SQL in
order to accomplish this. I'm trying to put the users into groups
(notsure ifgrouptype matters ornot) to reduce the number of logins
that must be managed in SQL.

If I give theADuseraccount db_datareader, I have no issues. If I
give theADgroupdb_datareader and then remove theuseraccount, I
get an error message whenever I open the linked table manager and try
to link it do the correct DSN.

The error message is "The Microsoft Jet database engine couldnotfind
the object 'dbo_blahblah'. Make sure the object exists and that you
spell its name and the path name correctly.

Any ideas why thisworksif theuseris granted access,butnotwhen
the groups is? Any help is greatly appreciated!

I've done some research and understand a little more about how Windows
authentication in SQL works. I've made sure the group is in both the
master table sysusers, and the appropriate database table sysusers. I
also used dsget to return the SID of the group in Active Directory.
Is there anyway I can see the SID used in SQL? I looked in the
tables, but all it says is <binary> and I can't see the actual value.
Again, any help would be appreciated!- Hide quoted text -

- Show quoted text -

Alright, one last piece of information. I am successfully able to add
a LOCAL group (one on the SQL server) with the correcto DOMAIN members
and get everything working. I can't for the life of me figure out why
I can't create a domain group and get the same results. I'm going to
put it in production like this, but still...any help would be
appreciated!

.

Relevant Pages