Domain Collapse. Sql permission question.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Guru (gss20_at_hotmail.com)
Date: 02/26/04 

Date: Thu, 26 Feb 2004 12:43:57 -0800

Internally sql server uses SID of NT users to link them
with sql logins. I don't know if NT will preserve SIDs
when users are migrated to another domain. If it does then
users can login with Domain2\user1 and still have same
permissions in sql server based on their SID stored in
sysxlogins table, though their username will be displayed
as Domain1\user1. You can update sysxlogins table and
change users display name.

If users are assigned new SID by NT then I am afraid you
have to add them again and assign permisstions.

hth.

>-----Original Message-----
>We are in the process of collapsing a domain. How do i
change the database permissions to reflect the new domain
names. Example Domain1\user1 is migrated to Domain2. user1
is now Domain2\user1. In SQL, the user is still displayed
as Domain1\User. Any idea. Thanks in advance.
>.
>

Relevant Pages

  • RE: NT4 Migration
    ... My understanding is you want to restructure the NT4 domain into a AD ... I know your major concern is move SQL server 2000 to new domain. ... Basically if you enabled SID history feature in AD, ... Detached all the user Database. ...
    (microsoft.public.windows.server.migration)
  • Re: NT > 2003 domain name changes
    ... Can't use the DTS option as it doesn't retain the SID, ... -restore database to SQL2K ... - cut out logins that do not apply to the database at hand ... >> windows authentication over to a new sql server on a new ...
    (microsoft.public.sqlserver.security)
  • RE: SQL server migration
    ... which authentication method did you use? ... Basically if you enabled SID history feature in AD, ... Migrated SQL Server to new domain. ... Detached all the user Database. ...
    (microsoft.public.windows.server.migration)
  • RE: SQL server migration
    ... which authentication method did you use? ... Basically if you enabled SID history feature in AD, ... Migrated SQL Server to new domain. ... Detached all the user Database. ...
    (microsoft.public.windows.server.migration)
  • Re: SQL User SID format?
    ... The option of creating a login with a specified SID is provided for allowing SQL logins to be moved from one server instance to another - this means you already have access to a SID from the syslogins catalog; you don't need to generate one yourself. ... It is true that SQL Login SIDs are actually GUIDs, but the SID you selected below is a SID, not a GUID. ...
    (microsoft.public.sqlserver.security)