June 9, 2003 at 3:50 am
i want to use group permissions, but some of the applications connecting to the databases require a local username with no domian qualifier. whats the best way to acheive this. i have windows & sql security on.
June 9, 2003 at 4:04 am
If yuo are saying they have a local account on the server that needs to be used then you can create the group locally and add domain accounts or domain groups to the local group and work with that way.
June 9, 2003 at 5:08 am
Shouldnt have to provide anything if the app is using NT authentication, SQL should detect and authorize access if appropriate. If the apps require a sql login then you'll have to provide one, in that case you should create a role, grant permissions to the role, then add the login to be used by the application to the role.
Andy
June 9, 2003 at 3:01 pm
The only requirement is that you grant both local and domain accounts access
to login to the sql server (xp_grantlogin or manually using EM). Once the accounts have been granted access to login to SQL server, you can add them in any group on any database.
Ex. for domain account domain_A\UserName_A you can follow this steps
1. Exec Master..xp_grantlogin 'domain_A\UserName_A'
2. Use DBName
Exec Master..sp_adduser 'domain_A\UserName_A',NULL,'Group_Name' /** Refer to sp_adduser
for param. details
Ex. for local account Local_MachineName\UserName you can follow this steps
1. Exec Master..xp_grantlogin 'Local_MachineName\Local_UserName'
2. Use DBName
Exec Master..sp_adduser 'Local_MachineName\Local_UserName',NULL,'Group_Name'
For SQL 6.5 you need to use local group(s) instead of local users.
MW
MW
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply