Re: Rename AD group



A.M.,

It has been a while since I did this, back on SQL Server 2000. I don't
believe there is a command in SQL Server 2000, so I probably did something
very illegal like update the system table. (Impossible in SQL Server 2005
and not really a good idea in SQL Server 2000.)

In SQL Server 2005, you can ALTER LOGIN [loginname] WITH NAME=[newname].
This will work if the SID for the new name is the same as the SID for the
old name. (Which is your case.) However, this does not rename the users in
the database, so you must also run ALTER USER [username] WITH NAME =
[newusername] for each database where the login is a user.

If you want it to be really clean, you might prefer to script out all the
rights to the login and users then drop the old users and logins. After
that recreate the new new login and regrant the rights. To find role
memberships of a login you may:

exec sp_helplogin [loginname]

However, rights granted directly to a login (something I rarely do) have to
be found in each database, perhaps by using:

exec sp_helprotect @username=username

In SQL Server 2005 there are some new views, but that won't help you with
SQL Server 2000.

RLF

"A.M." <amalekshahi@xxxxxxxxxx> wrote in message
news:uTrp%23726IHA.1196@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

Our Active Directory team renamed a group name from DOMAIN\GROUP1 to
DOMAIN\GROUP2. Although everything is Ok on Windows side (All references
to DOMAIN\GROUP1 is changed to DOMAIN\GROUP2 for example in local admin),
SQL Server still shows DOMAIN\GROUP1 in its login list and
sp_validatelogins reports DOMAIN\GROUP1 as invalid group name.

How can I refresh syslogins (or anywhere else) on SQL Server 2000 and 2005
to have DOMAIN\GROUP2 instead?

Thanks



.



Relevant Pages

  • Re: Which Method to Create a Database Do I Use?
    ... To be fair, VS is a "generic" tool designed to front a variety of backend databases, but each of the serious engines have rights management needs as well. ... But the more I think about how connecting to a database is setup and the trouble it's been, the more it just pisses me off. ... Hitchhiker's Guide to Visual Studio and SQL Server ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Which Method to Create a Database Do I Use?
    ... when I was working on the team) to get rights management tools integrated ... Hitchhiker's Guide to Visual Studio and SQL Server ... actually be able to connect to the database. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: System Administrator Implied Permissions
    ... > sa login, it assigns it the System Administrator fixed ... > Now, given this, why does SQL Server ... in each database is always a member of the public and db_owner roles. ... Other sysadmin role members have the exact same ...
    (microsoft.public.sqlserver.security)
  • Re: cannot login to the db after...
    ... Jasper Smith (SQL Server MVP) ... I have created a new database, "db_1", using the "sa" ... I then created a new login, "sqluser1" and gave ...
    (microsoft.public.sqlserver.security)
  • Re: Which Method to Create a Database Do I Use?
    ... Okay, once the database is built, you have to get rights to access it. ... SSPI and "SQL Server" ... and Hitchhiker's Guide to SQL Server 2005 Compact Edition (EBook) ...
    (microsoft.public.dotnet.framework.adonet)