Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / General / Security / October 2006

Tip: Looking for answers? Try searching our database.

SQL Server 2005 Windows Authentication mapping to Logins

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Chem Finder - 23 Oct 2006 18:46 GMT
I configured SQL Server 2005 Express to use Windows authentication.  I want
to give ordinary users  sysadmin privileges.  How do you map Windows groups
to SQL Server logins?  There appears to be one Login, BUILTIN\Users.  Members
of the Administrators group of the machine have full access, but members of
the Power Users Groups are logged into SQL Server as 'guest.'  How are
Windows Authentication logins mapped to SQL Server logins?
Signature

Jim Katz
CompuCyte Corp.

Arnie Rowland - 23 Oct 2006 20:36 GMT
Often, the quality of the responses received is related to our ability to
'bounce' ideas off of each other. In the future, to make it easier for us to
give you ideas, and to prevent folks from wasting time on already answered
questions, please:

Don't post to multiple newsgroups. Choose the one that best fits your
question and post there. Only post to another newsgroup if you get no answer
in a day or two (or if you accidentally posted to the wrong newsgroup -and
you indicate that you've already posted elsewhere).

If you really think that a question belongs into more than one newsgroup,
then use your newsreader's capability of multi-posting, i.e., posting one
occurrence of a message into several newsgroups at once. If you multi-post
appropriately, answers 'should' appear in all the newsgroups. Folks
responding in different newsgroups will see responses from each other, even
if the responses were posted in a different newsgroup.

Signature

Arnie Rowland, Ph.D.
Westwood Consulting, Inc

Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous

You can't help someone get up a hill without getting a little closer to the
top yourself.
- H. Norman Schwarzkopf

>I configured SQL Server 2005 Express to use Windows authentication.  I want
> to give ordinary users  sysadmin privileges.  How do you map Windows
[quoted text clipped - 5 lines]
> the Power Users Groups are logged into SQL Server as 'guest.'  How are
> Windows Authentication logins mapped to SQL Server logins?
Sue Hoegemeier - 27 Oct 2006 00:50 GMT
Why do you want to give ordinary users sysadmin privs?
That's pretty dangerous.
Anyway...you add windows users or groups as SQL Server
logins by using CREATE LOGIN. For example:
CREATE LOGIN [YourDomain\YourGroup] FROM WINDOWS
If the group is one of the built in standard groups on the
local box, you would use BUILTIN for the domain. For
example, to add the local administrators you would use:
CREATE LOGIN [BUILTIN\Administrators] FROM WINDOWS

-Sue

>I configured SQL Server 2005 Express to use Windows authentication.  I want
>to give ordinary users  sysadmin privileges.  How do you map Windows groups
>to SQL Server logins?  There appears to be one Login, BUILTIN\Users.  Members
>of the Administrators group of the machine have full access, but members of
>the Power Users Groups are logged into SQL Server as 'guest.'  How are
>Windows Authentication logins mapped to SQL Server logins?
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.