Re: xp_logininfo not working for some types of users

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 06/04/04


Date: Thu, 03 Jun 2004 19:24:02 -0600

If you know what groups you need to check, you could use
IS_MEMBER to determine if the user is a member of that
windows group.

-Sue

On Wed, 2 Jun 2004 11:01:05 -0700, "Steve Z"
<szlamany@antarescomputing_no_spam.com> wrote:

>We use master..xp_logininfo to check if a user has access to the database. If no recordset is returned we determine that the user actually has no real windows access to the server or database.
>
>We do this in a SPROC that is used for returning "internal application" roles.
>
>We thought that since we were setting up a new user, we mine as well show the DBA folks if that user actually has access to the database.
>
>For users with specific (by username) access to the database, it works.
>
>For users that get access to the database via a Windows Group, it doesn't work - no recordset is returned.



Relevant Pages

  • Re: Managing SQL database rights using AD
    ... logins to SQL Server. ... You would add these two logins you ... just added as users in the database. ... the Windows group that you just added as logins (and then ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Server role members
    ... I create a windows group BAIWEI\testgroup, ... Then, in SQL Enterprise Manager, in the pubs database, I add this SQL ... specified Microsoft Windows NT group or Microsoft SQL Server role. ...
    (microsoft.public.sqlserver.security)
  • Re: NT Autentication for Windows groups
    ... Create a database role for each group of users. ... easier to manage if the group of users were in a Windows Group. ... Looking for a SQL Server replication book? ...
    (microsoft.public.sqlserver.server)
  • Re: Need help on how to organize users and objects
    ... Security is a huge subject in SQL Server 2005, so I'd suggest you to spend ... Create two Windows Group (Dev and Viewers) ... database A and 6-9 tables in Database B you can assign explicity GRANT ...
    (microsoft.public.sqlserver.security)
  • Re: xp_logininfo not working for some types of users
    ... if the user is a member of a Windows group using this ... It doesn't apply to just database roles. ... >They have those rights basically two ways - by the specific username or some Windows Group. ...
    (microsoft.public.sqlserver.server)