Linked server using Windows Auth across untrusted domains

Hi,

I have a SQL 2000 server in domain1, and need to create a linked server to a
SQL 2008 in domain2 using windows auth. The domain admins do not want to
setup a trust between the two domains. They gave me an AD account in domain2
to connect with. Is there a way to setup the linked server using current
windows auth, and tell the domain controller for domain2 that anything coming
from the domain1\MSSQLServer service account should connect to
domain2\someacct that I was given?

Thanks,

realizer2000 (realizer2000@discussions.microsoft.com) writes:
> I have a SQL 2000 server in domain1, and need to create a linked server
> to a SQL 2008 in domain2 using windows auth. The domain admins do not
> want to setup a trust between the two domains. They gave me an AD
> account in domain2 to connect with. Is there a way to setup the linked
> server using current windows auth, and tell the domain controller for
> domain2 that anything coming from the domain1\MSSQLServer service
> account should connect to domain2\someacct that I was given?

No. The only way to log with Windows authentication in SQL Server, is
to first be logged into Windows with that account.

You would need an SQL login on the remote server to map your user to.
(This you can do with sp_addlinkedsrvlogin.)


--
Erland Sommarskog, SQL Server MVP, esquel.DeleteThis@sommarskog.se

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx