NT Active Directory Groups and SQL DB Roles

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

GingerDeafMan - 23 Feb 2005 13:13 GMT

Is it possible to match SQL DB roles with Active Directory/NT groups?

i.e. A user could be in 2 AD/NT groups (e.g. gAdmin and gUser). I then
want this user to be member of rAdmin and rUser in my database.

I am trying to allow the administration of users in AD/NT, rather than
SQL Server.

Cheers,

Reply to this Message

Steve Thompson - 23 Feb 2005 16:06 GMT

> Is it possible to match SQL DB roles with Active Directory/NT groups?
>
[quoted text clipped - 3 lines]
> I am trying to allow the administration of users in AD/NT, rather than
> SQL Server.

I'm not entirely clear on your group analogy, to answer your last question.
You could restrict the ability of administrators in AD to have SQL Server
administrative rights by removing the BUILTIN\Administrators group from SQL
Server. Before removing the group, make sure you've added a custom nt group,
and granted sysadmin permissions to this group.

Steve

Reply to this Message

Kevin McDonnell [MSFT] - 25 Feb 2005 01:08 GMT

It sounds like you're asking if you can prevent a Domain Admin from
administering your SQL Server.
By default in most domain environments, Domain Admins are members of the
local admins group.
Local admins are by default System Admins in SQL.

Thanks,

Kevin McDonnell
Microsoft Corporation

This posting is provided AS IS with no warranties, and confers no rights.

Reply to this Message