Permissions problem on SBS 2003 R2 for SQL Server 2005 clients



I've been attempting to troubleshoot the following permissions problem
involving SQL Server Express 2005 on a Windows SBS 2003 R2 network.
Let me apologize that what follows is reposted from the
microsoft.public.sqlserver.server group, as it did not happen to
receive a response:


I've been testing a SQL Server 2005 Express database in a multiuser
environment using Window Small Business Server 2003 R2 with Windows XP
service pack 2 on the clients. The database in question is under the
default "SQL Server Express" instance. Security is Windows
Authentication.

Client connection to the database via SSMSE was able to be established
without difficulty using the surface area configuration utilities,
with a catch that I can't understand.

On a given client computer to which I may have logged on with Windows
administrator privileges, after connecting to the database via SSMSE,
the connection icon changes from the empty white circle to the green
circle with a white arrowhead and all database elements are
accessible, as expected.

However, when I logon to Windows SBS on a client computer with a test-
user not bearing administrator privileges (as of course intended), a
phenomenon occurs that I cannot understand or resolve: the client is
able to "connect" to the database via SSMSE, in that the connection
dialogue is successful and, once again, all database elements are
accessible (tables may be opened directly and their data modified,
stored procedures may be executed successfully, etc.). However, the
status icon remains an empty white circle, not a green circle with a
white arrowhead.

The reason this "pseudo-connected" status is a problem in my
particular case is that I am using an ADP which behaves erratically
with respect to recordsources whenever the green circle/white
arrowhead is absent. I apologize that this is essentially a re-post,
as I initially began to seek assistance with this problem via the
microsoft.public.access.adp.sqlserver group (see the "Recordsource
only available to Administrator on clients" post for specific details
of the ADP behavior).

By adjusting user permissions in the SBS 2003 console, I believe I
have isolated the apparent permissions problem to the "Domain Admins
Group": if a non-administrator user is added to this group, the
problem goes away; any Administrator is of course natively a member of
this group.

Because it will not be practical to grant administrator privileges to
clients, I would be grateful for any insight on this phenomenon.

.



Relevant Pages

  • Re: Saving WSS site prior to upgrading SQL Server 2005 Express to Standard/Enterprise
    ... Your backup is from a different version of Windows SharePoint Services and ... SQL Server 2005 is available. ... The advantages of the embedded version ("Windows Internal Database") over ...
    (microsoft.public.sharepoint.windowsservices)
  • IIS / SQL Server impersonation
    ... I am attempting to implement impersonation from a windows application ... I have configured the host virtual directory in IIS to require windows ... the database permits Windows Authentication. ... When I try and open a connection to SQL Server: ...
    (microsoft.public.dotnet.security)
  • Re: Quick Question on SQL Server 2005 Express
    ... you can't attach a database in a remote machine in your network as Andrew has already mantioned. ... One database can be used only by one SQL Server instance and as far as I understand the database in question is already attached to a SQL Server instance. ... Why not installing only SQL Server Management Studio and connect to your remote instance and perform actions this way? ... The Client can live anywhere as long as it has TCP access to the server. ...
    (microsoft.public.sqlserver.setup)
  • Re: Quick Question on SQL Server 2005 Express
    ... I have not seen any documentation yet that states connecting other editions of SQL Server using SSMSE would break any license agreement. ... As Ekrem stated they should have a licensed edition of the full client tools and then all they have to do is register the server in the registered servers dialog and they should be all set. ... I have installed SQL Server 2005 Express, and now I want to connect to the remote database and use the Management Studio to manipulate the database. ...
    (microsoft.public.sqlserver.setup)
  • Re: User setup problem.
    ... login permissions for SQL Server. ... have access to SQL Server and the database through their ... windows group role membership which has the permissions.. ...
    (microsoft.public.sqlserver.security)