Re: Install MSDE w/ MSDE Depl.Toolkit. What permissions when using Win Auth?

From: Andrew Gaskell (agaskelluk_at_yahoo.com)
Date: 11/30/04 

Date: 30 Nov 2004 03:08:17 -0800

Andrea
thanks for the response. However by using Windows groups, don't I
still have to maintain the group itself on the server by manually
adding a domain user to the group each time a new user requires access
to my application?

I read about the Builtin\Administrators group. My detatched SQL
database will still have the Builtin\Administrators group and my
clients will be members of the local admin group on Win2K, so as I
understand it they should have access to the MSDE database. Is this
correct?

Thanks
Andrew

"Andrea Montanari" <andrea.sqlDMO@virgilio.it> wrote in message news:<3110nvF353jhhU1@uni-berlin.de>...
> hi Andrew,
> "Andrew Gaskell" <agaskelluk@yahoo.com> ha scritto nel messaggio
> news:63c811db.0411290355.c5c2166@posting.google.com
> > Hi All
> > I have been following Mario Szpuszta's excellent article on MSDN "The
> > MSDE Deployment Toolkit (RC)in
> >
> Action"(http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnm
> sde/html/msdedepl.asp)
> > to build a package which can install MSDE (if required) and then
> > install my database and its application.
> >
> > I package my database up by:
> >
> > 1. Stop replication on the database (full SQL server version) on the
> > server that I want to distribute.
> > 2. Detach the database on the server.
> > 3. Copy the mdf and ldf files to my development machine.
> > 4. Create my MSDE installer package with the mdf and ldf files and use
> > sp_attach_db to install the database on the MSDE clients.
> >
> > I am using Windows Authentication, so what do I need to do to make
> > sure that whoever uses the client application to access the MSDE
> > database has the correct permissions? I really cannot explicitly give
> > every single user (>500) their own login to the database as it would
> > mean a lot of tedious admin work and it would be a nightmare to
> > maintain as every time there is a new user I would have to give that
> > new user a login on the SQL server and then go through steps 1-4 and
> > re-package and distribute.
> >
>
> as you are using Windows authentication, you can grant the domain logins
> access to MSDE via sp_grantlogin
> (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts
> _sp_ga-gz_8dri.asp) ... you should use not every single Windows login but
> Windows Groups, so that all members of the specified group will inherit
> access to SQL Server... later you've to grant them access to your databases
> via sp_grantdbaccess
> (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts
> _sp_ga-gz_290z.asp), again using the Windows group and possibly making them
> part of a database role you can and should grant the required privileges...
> you can even create/use more database roles to handle different privileges
> levels

Relevant Pages

  • Re: MS SQL Server OLAP data access with oledb
    ... > I made a webpage in asp.NET that access data trough Oledb and everything ... When I moved the OLAP Database to a different computer our Database ... > Server I get an error when I try to open the OledbConnection. ... Either use a domain user for the website and for ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Sharepoint Migration issues
    ... the domain user is in the admistrators group on the sql server. ... I use the domain user to log into the WSS server. ... The current server hosts the WSS site and also the sql database. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Sharepoint migration "IIS application pool username is invalid
    ... The IIS server is part of the domain, and i have made the domain user local ... administrator as well as network administrator for trouble shot. ... > you should also change the "Configuration Database Administration Account" ...
    (microsoft.public.sharepoint.portalserver)
  • Create SharePoint Portal failed.
    ... One mentioned ensuring that SQL Server uses a case ... 13:55:40 Service database server is 'USDC-JOHRIV'. ... Update dbo.propertylist set DisplayName = N'Last name' ...
    (microsoft.public.sharepoint.portalserver)
  • Re: ADO Connection Timeout
    ... to the central server, but you are willing to live with periods where it ... i.e. a local database or even a text file. ... to function until the connection can be restored to the server. ...
    (microsoft.public.data.ado)