Re: Permission issue with EXECUTE AS

INTP56 (INTP56@xxxxxxxxxxxxxxxxxxxxxxxxx) writes:
It appears I have finally determined the difference.

After talking with the network guy, he noted that I was NOT a member of
the group that has the sysadmin rights for that box, but my personal
domain account had been explicitly given sysadmin rights to the box.
Which he was irked at, because that is not supposed to happen, I should
have been added to the admin group. However, the machine account was in
that group.

But, that IS A DIFFERENCE, even though we have the same "rights" either
way. So I found out what other accounts were given rights via the group,
and tracked those guys down and ran my script under their accounts, and
BAM, got the error. There was one other account that had been given
explicit access (also shouldn't be) and my script ran without errors on
that account. If it wasn't for the fact this box is a test server, and
not under the network team's direct control, this situation would have
never been allowed to exist.

There is still something fishy here. I can't see any reason why it
should not work on the other accounts. I think something is wacko here,
but not having access to the box to see the misery, I cannot really tell
what is going on.

--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.

Relevant Pages

  • Re: Trusted SQL Connections & NT AUTHORITYNETWORK SERVICE
    ... SYSTEM account in terms of the credentials it uses on the network. ... hitting a SQL Server on the same machine as the web app. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: backing up to network share issue.
    ... I guess I was confused by your later text where I read it as if you stated that it would be the Agent account ... Tibor Karaszi, SQL Server MVP ... >> impersonation when it accesses the backup file on behalf of the SQL Server ... >>> As Tibor stated, this is not an SQL Server issue, it is a network ...
    (microsoft.public.sqlserver.msde)
  • Re: Unable to Backup on Network
    ... service accoutn from the 'Local System' account to a specific account. ... I like to log in to the SQL server console as the service account to test ... > The operating system on which my SQL Server 2000 is there is Windows 2000> Server while i want to take the backup on another computer on network which> also has same operating system. ...
    (microsoft.public.sqlserver.security)
  • Re: Network logon issues
    ... > We have a Win2k SQL Server on our network that simply cannot log on at the ... > You can log onto the machine itself using the local administrator account, ... > you can see the system in the list of networked machines, ... Disconnect the SQL server from the network, Run ADUC on one of your DCs, ...
    (microsoft.public.win2000.advanced_server)
  • Re: windows service
    ... If the SQL server is on another machine, ... under the Local System account (which doesn't have network access), ...
    (microsoft.public.dotnet.languages.csharp)