Re: NT Autentication for Windows groups

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Mark Allison (mark_at_no.tinned.meat.mvps.org)
Date: 02/02/05 

Date: Wed, 02 Feb 2005 10:57:10 +0000

Gayanga,

Create a database role for each group of users. It would be great and
easier to manage if the group of users were in a Windows Group.

So, for your example, create a Database Role called Managers (or
whatever) in your database. Then grant appropriate permissions to this
role - SELECT, INSERT, etc. Then add the appropriate database users to
the Managers role. These would be mydomain\managers if you have a
windows group (I'm assuming you have already created a mydomain\managers
login and allowed this login access to your database). The owners of all
the objects in the database should be dbo.

All the above can be done in Mixed mode and Windows Only authentication. 

-- 
Mark Allison, SQL Server MVP
http://www.markallison.co.uk
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602m.html
Gayanga Alagiyawanna wrote:
> Does any one know how to use NT authentication with SQLServer 2000 for 
> windows group users. 
> 
> I want to create one set of tables for a given group in the same 
> database and want to give access to the members of that group only.
> 
> If my domain is mydomain and
> windows group is managers
> 
> does the table owner have to be mydomain\managers ?
> 
> is it possible for all the users in this windows group to access
> the tables without giving mydomain\managers prefix for the tables?
> 
> wht are the settings in the server that needs to be done 
> inorder to do this?
> 
> Can this be done in Mixed mode authentication?
> 
> 
> 
> 
> 
> 
> 
> 
> 
>

Relevant Pages

  • Re: Managing SQL database rights using AD
    ... logins to SQL Server. ... You would add these two logins you ... just added as users in the database. ... the Windows group that you just added as logins (and then ...
    (microsoft.public.sqlserver.security)
  • Re: Group Already Exists
    ... including Windows-based users, in your database. ... I support the Professional Association for SQL Server ... HOw do I bring that Windows Group that already exists ...
    (microsoft.public.sqlserver.server)
  • Re: SQL Server role members
    ... I create a windows group BAIWEI\testgroup, ... Then, in SQL Enterprise Manager, in the pubs database, I add this SQL ... specified Microsoft Windows NT group or Microsoft SQL Server role. ...
    (microsoft.public.sqlserver.security)
  • sp_start_job, run by normal users?
    ... What I would like is to create a SP in a database that calls sp_start_job. ... to go through making certificates to allow cross database execution of SPs. ... What I would like it to create a role in a database, assign my Windows group ... I got the execution context error on the SPs. ...
    (microsoft.public.sqlserver.security)
  • Re: Need help on how to organize users and objects
    ... Security is a huge subject in SQL Server 2005, so I'd suggest you to spend ... Create two Windows Group (Dev and Viewers) ... database A and 6-9 tables in Database B you can assign explicity GRANT ...
    (microsoft.public.sqlserver.security)