Re: SQL7 servers integration in Active Direcory 2003

From: AnthonyThomas (Anthony.Thomas_at_CommerceBank.com)
Date: 12/30/04


Date: Thu, 30 Dec 2004 07:54:21 -0600

It depends how you are using the NTLM.

First, SQL Server 7 is not supported on Win 2K3 but it is on Win 2K, which
is supported in a Win 2K3 AD domain.

AD uses Kerberos by default but will use NTLM is Kerberos fails. There are
quite a few new rules and restrictions for Kerberos and delegation that you
need to be aware of if you were doing any server to server communications.

If you are leaving the SQL 7 installations installed on NT 4 servers, you
will see performance issues in that the AD will not be able to run in native
mode.

There is also an issue with the SQL Agent jobs that are owned by network
authenticated logins. SQL Agent has an issue validating those credentials.
I've seen several KB articles about this and there are various Hot Fixes
available to attempt to resolve the issue, but I have not met with success
with any of these.

Other than this, authentication should behave the same.

Sincerely,

Anthony Thomas

-- 
"olivier" <olivier@discussions.microsoft.com> wrote in message
news:90B12136-4AAC-441C-BC44-9DEA2F7E47A1@microsoft.com...
We have 2 SQL 7 servers sp4 on Windows 2000 server  in Windows NT4 SAM
Directory i want to kow if we make an on place migration (from NT4 SAM to
Active Directory 2003)  if the NT authentification  will be ok when we ll
have AD 2003
(i want to know if there is any problem with NT authentification in AD 2003
environnement with SQL 7 servers). thanks about your answer
oliver Blanchard France


Relevant Pages

  • Re: Cannot telnet some ports
    ... Some with remote administration feature I believe. ... POP3 Server 110 ... # Network services, Internet style ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)
  • Re: Cannot telnet some ports
    ... Some with remote administration feature I believe. ... >> From a Windows 2003 Server SP2 ... >> fromn the 2k3 serrver but can telnet into any other port. ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)
  • Re: Kerberos logon to Terminal Server prevents folder redirection
    ... Pass-through refers to the client browser passing through credentials to the Web Interface server; so you can still use Pass-through without enabling the option "Use Kerberos authentication to connect to servers". ...
    (microsoft.public.windows.server.security)
  • Re: Cannot telnet some ports - OT
    ... why would any one still want to allow telnet into server? ... Some with remote administration feature I believe. ... fromn the 2k3 serrver but can telnet into any other port. ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)
  • Re: Cannot telnet some ports - OT
    ... why would any one still want to allow telnet into server? ... Some with remote administration feature I believe. ... fromn the 2k3 serrver but can telnet into any other port. ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)