Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / General / Security / October 2005

Tip: Looking for answers? Try searching our database.

Authenticate via Active Directory from PC that's not joined the do

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
David Samson - 18 Oct 2005 16:41 GMT
I have several people on my team that are working remotely from PCs that are
stand-alone, ie. they have not been joined to the domain.  They do have an
account on the domain, though, which they use to map drives and such.  How
can I set it up so that they can use Enterprise Manager or Query Analyzer by
authenticating with their domain account?
Sophie Guo [MSFT] - 19 Oct 2005 06:30 GMT
Hello,

I suggest that you create a SQL login for each user.  You can refer to the
following article:

Adding a SQL Server Login
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad
_security_9m0e.asp

How to set up Mixed Mode security (Enterprise Manager)
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/howtosql/ht
_6_secrty_68c9.asp

Make sure SQL server use mixed mode Authentication.

If the client can join the domain with a domain user account,  you can add
the domain user account as a Windows login. You can refer to the following
web site:

How to grant a Windows user or group login access to SQL Server (Enterprise
Manager)
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/howtosql/ht
_6_secrty_68c9.asp

Granting a Windows User or Group Access to a Database
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad
_security_2wit.asp

I hope the information is helpful.

Sophie Guo
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
Signature

This posting is provided "AS IS" with no warranties, and confers no rights.

David Samson - 19 Oct 2005 13:00 GMT
I forgot to include this in my orginal post (sorry), but I really want to
avoid using SQL Server logins - we got docked in our security reviews of the
server if there are any SQL Server logins.

> Hello,
>
[quoted text clipped - 36 lines]
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
Sophie Guo [MSFT] - 20 Oct 2005 11:12 GMT
Hello,

If the client is unable to join the domain with a domain user account, and
the machine which installs SQL server is not a DC, a workaround may be :

1. Create a local user account on the SQL server machine. Grant the user
account to access SQL server.

2. Create a same local user account on the client machine. The user account
has the same user name and password as the local user account on the SQL
server machine.

3. Log on the client machine with the local user account of SQL server
machine, then dial in the network with a VPN. After connecting to the
network, it can connect to SQL server.

I hope the inforamtion is helpful.

Sophie Guo
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
Signature

This posting is provided "AS IS" with no warranties, and confers no rights.

 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.