{permissions} How should I do this?



Hey

We are using Sql Server 2005. Our database server is a win2k3 machine. We
have Active Directory etc

Now we want an external user to get access to one of our data systems. He
needs ddl/read/write permissions on a specific database and also read/write
permissions on some folders on the harddrive on the server.

I think I can accommplish access to the database by assigning the user to
these database roles: db_datareader, db_datawriter, db_ddladmin....

The biggest problem is how to give this user access to the folders. If I
create him in AD then he becomes member of Domain Users group which means
that he has access to everything Domain Users has access to. I tryed to
remove the Domain Users group from this user, but did get a message that I
couldn't do it because this was the default group... If this user is member
of Domain Users, then he has access to much in our network...

(I have the impression that if I change what is the default group, then I
have to apply this change to all users in AD)

any suggestions?


.



Relevant Pages

  • Re: Resource sharing between domains...
    ... I had to manually eastablish a two-way trust so that they could see ... include it's domain users in the domain users of domain A. ... >contains server B is the trusted domain and that the domain that contains server A is ... >Also try adding the domain users group from the server that contains server B to the ...
    (microsoft.public.win2000.networking)
  • Create SharePoint Portal failed.
    ... One mentioned ensuring that SQL Server uses a case ... 13:55:40 Service database server is 'USDC-JOHRIV'. ... Update dbo.propertylist set DisplayName = N'Last name' ...
    (microsoft.public.sharepoint.portalserver)
  • Re: ADO Connection Timeout
    ... to the central server, but you are willing to live with periods where it ... i.e. a local database or even a text file. ... to function until the connection can be restored to the server. ...
    (microsoft.public.data.ado)
  • Web Developers - Happy Hearts And HDTV! - Lockergnome
    ... Certificate on your MSIIS Web server. ... getting data from a database is only half the problem. ... Zend recently started a series about building rock solid code in PHP. ... which provides bulk database conversion. ...
    (freebsd-questions)
  • Re: TNS could not resolve the connect identifier
    ... This database resides on Machine A. ... The Web server is running on Machine B. ... Using tnsping is not as good as using a real connection such as via ... client (note that this is terminology that appears in the 10g R2 ...
    (comp.databases.oracle.server)