Re: Login succeeded followed by Logon Failed

stu,

If you are granting access to the server through domain groups rather that
to individual user accounts, then Accounts\Joe may be in several groups.

If he is in a group that has been assigned a default database to which he
does not have rights, then he _may_ fail to attach to his default database.
(Why won't everyone fail? Because they are not all members of the same
group and (as far as I have been able to discover) which group will provide
the default database for the user login is not deterministic.)

Actions:

1) Check to see if any Group Logins have a default database assignment to a
database in which they have no rights. If so, correct this.

2) Explicitly set the default database for the logins that are failing.
Even though all rights will still be granted through their group
memberships, the login account default database will have priority over any
group settings.
sp_defaultdb 'Accounts\Joe', 'GoodDefaultDB'

You do not have to create an Accounts\Joe login, but the sp_defaultdb will
create one for you in this case.

RLF

"stu" <stu@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F8CDE8B3-B206-473A-94C5-F6A408B61064@xxxxxxxxxxxxxxxx
We are experiencing some strange behaviour on SQL Server 2000. Certain
members of a domain group are unable to login. The error log says
something
like

2007-04-27 08:45:14.33 logon Login succeeded for user 'Accounts\joe'.
Connection: Trusted.

2007-04-27 08:45:14.33 logon Login failed for user 'Accounts\joe'.

This is only affecting certain members of the group. (The SQL Server Error
msg says the user can not access their default database).Any suggestions
as
to why this might be happening.


.

Relevant Pages

  • Re: System Administrator Implied Permissions
    ... > sa login, it assigns it the System Administrator fixed ... > Now, given this, why does SQL Server ... in each database is always a member of the public and db_owner roles. ... Other sysadmin role members have the exact same ...
    (microsoft.public.sqlserver.security)
  • Access problem using computer domain account
    ... All of these systems are members of a domain that I'll call DOMAIN. ... MySvr2 has a service running under the local system account. ... We've created a database login for SecGroup on all four servers. ...
    (microsoft.public.sqlserver.security)
  • Re: PDO: Switch database user without reopening connection
    ... At the bare minimum there will be a login user who only has ... modifications to the database as well (editors get update permission, ... As database connections are expensive to ... a certain visitor in the Session, and use that value to start the right ...
    (comp.lang.php)
  • Re: PDO: Switch database user without reopening connection
    ... At the bare minimum there will be a login user who only has ... the postgres user they are logged in as to one that can make ... modifications to the database as well (editors get update permission, ... As database connections are expensive to ...
    (comp.lang.php)
  • RE: How to allow users to change their password?
    ... be set up to provide the Security dialog window for password changes. ... I'll have to login using their login ... > name/password first. ... See http://www.QBuilt.com for all your database needs. ...
    (microsoft.public.access.security)