SIMPLE and wierd SQL Server 2000 login problem
- From: sudmill@xxxxxxxxxxx
- Date: 11 Apr 2006 09:47:48 -0700
Hi,
I have setup the following server (DomainB\ServerA): SQL Server 2000
8.00.2039 (sp4) on Windows 2003 EE Sp1
Installed and patch a new instance called DAWH. The SQL Server service
is running under "DomainA\sqlserverservice" domain account with
administrator privs on ServerA.
The BUILTIN\Administrators account has been removed
Added a new local windows group called "ServerA\SQLAdminGroup"
Added my domain account "DomainB\chump" (note this a different
domain) to this local windows group "ServerA\SQLAdminGroup"
Run EXEC sp_grantlogin 'ServerA\SQLAdminGroup' [in SQL under SA
login]
Ran EXEC sp_addsrvrolemember 'ServerA\SQLAdminGroup', sysadmin [in
SQL under SA login]
My login has local administrator access on ServerA, so when I log into
windows (under DomainB\chump) and then try and connect via SQL Qry
Manager via windows authentication., I get a LOGIN FAILED for user
"DomainB\chump", even though its been granted sysadmin server role.
I believe this _should_authenticate under via the local windows group
"ServerA\SQLAdminGroup".
HOWEVER, If I remove it and add it directly under the SA account,
EXEC sp_revokelogin 'ServerA\SQLAdmin'
EXEC sp_grantlogin 'DomainB\chump'
EXEC sp_addsrvrolemember 'DomainB\chump', sysadmin
And then log in using DomainB via Windows Authentication thgrough Query
Analyzer, this works ! Im at a loss as to why - perhaps someone could
asist ? This is driving me crazy as Im not trying anything different
from normal (apart from that Ive removed the BUILTIN group!).
Why can I not add my domain group to a local windows group and
provision that with access within SQL Server??????
Thanks in advance for saving my hairline,
J
.
- Prev by Date: Re: Upgrading 2000 to 2005
- Next by Date: Re: SQL 2005 Remote Connection
- Previous by thread: Re: SQL Server x64 Ram usage
- Next by thread: Email alerts when IIS / SMPT not running
- Index(es):
Relevant Pages
|
Loading