Welcome to dbForumz.com!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

SQL user mapping for the AD user

 
   Database Forums (Home) -> Security RSS
Next:  Direct Client Needs : 10 Java Middleware resource..  
Author Message
arunyadav_ece

External


Since: Jul 17, 2010
Posts: 1



(Msg. 1) Posted: Sat Jul 17, 2010 2:25 am
Post subject: SQL user mapping for the AD user
Archived from groups: microsoft>public>sqlserver>security (more info?)

Hi,
Any AD users maybe mapped to a SQL user, so it should be possible to show
this and I also want to login into SQL server through AD user login. I am new
to Active directory SQL integration . Can any body help me out.

Thanks in Advance
Arun

 >> Stay informed about: SQL user mapping for the AD user 
Back to top
Login to vote
Erland Sommarskog2

External


Since: May 30, 2004
Posts: 1649



(Msg. 2) Posted: Sat Jul 17, 2010 9:25 am
Post subject: Re: SQL user mapping for the AD user [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

arunyadav_ece (u62124@uwe) writes:
> Any AD users maybe mapped to a SQL user, so it should be possible to
> show this and I also want to login into SQL server through AD user
> login. I am new to Active directory SQL integration . Can any body help
> me out.

Not really sure what you mean here.

In SQL Server there are two types of logins: SQL logins and Windows logins.
SQL logins are private to SQL Server and has nothing to do with Active
Directory.

Windows logins are straightforward. If you are logged into Windows as
DOMAIN\USERNAME which is member of group DOMAIN\GROUP, then you can log
into SQL Server if either DOMAIN\USERNAME or DOMAIN\GROUP as been granted
access to SQL Server.

--
Erland Sommarskog, SQL Server MVP, esquel.DeleteThis@sommarskog.se

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

 >> Stay informed about: SQL user mapping for the AD user 
Back to top
Login to vote
arunyadav_ece via SQLMons

External


Since: Jul 19, 2010
Posts: 2



(Msg. 3) Posted: Mon Jul 19, 2010 1:25 am
Post subject: Re: SQL user mapping for the AD user [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Thanks for reply...........can you please let me know how DOMAIN\USERNAME can
log
into SQL Server and how DOMAIN\USERNAME or DOMAIN\GROUP granted
access to SQL Server ?
Because I have tried to create the windows logins as Domain name/username and
give the sysadmin access to login but i dont know how i will use this login.
I am creating a windows application and I want to login into SQL server by AD
user Login.

Please help...

Arun


Erland Sommarskog wrote:
>> Any AD users maybe mapped to a SQL user, so it should be possible to
>> show this and I also want to login into SQL server through AD user
>> login. I am new to Active directory SQL integration . Can any body help
>> me out.
>
>Not really sure what you mean here.
>
>In SQL Server there are two types of logins: SQL logins and Windows logins.
>SQL logins are private to SQL Server and has nothing to do with Active
>Directory.
>
>Windows logins are straightforward. If you are logged into Windows as
>DOMAIN\USERNAME which is member of group DOMAIN\GROUP, then you can log
>into SQL Server if either DOMAIN\USERNAME or DOMAIN\GROUP as been granted
>access to SQL Server.
>

--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-security/201007/1
 >> Stay informed about: SQL user mapping for the AD user 
Back to top
Login to vote
Erland Sommarskog2

External


Since: May 30, 2004
Posts: 1649



(Msg. 4) Posted: Mon Jul 19, 2010 5:25 am
Post subject: Re: SQL user mapping for the AD user [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

arunyadav_ece via SQLMonster.com (u62124@uwe) writes:
> Thanks for reply...........can you please let me know how
> DOMAIN\USERNAME can log into SQL Server and how DOMAIN\USERNAME or
> DOMAIN\GROUP granted access to SQL Server ?

To grant access to a Windows user/group:

CREATE LOGIN [Domain\Username] FROM Windows

To login as this user: first log into Windows, then connect to SQL Server.
Alternatively, start the application with the "Run As" feature in Windows.

An important point here: once you are at the door to SQL Server, you cannot
specify a different Windows user than what Windows authenticated you as.



--
Erland Sommarskog, SQL Server MVP, esquel DeleteThis @sommarskog.se

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
 >> Stay informed about: SQL user mapping for the AD user 
Back to top
Login to vote
arunyadav_ece via SQLMons

External


Since: Jul 19, 2010
Posts: 2



(Msg. 5) Posted: Mon Jul 19, 2010 5:25 am
Post subject: Re: SQL user mapping for the AD user [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Thanks Erland, appreciated for your help

Erland Sommarskog wrote:
>> Thanks for reply...........can you please let me know how
>> DOMAIN\USERNAME can log into SQL Server and how DOMAIN\USERNAME or
>> DOMAIN\GROUP granted access to SQL Server ?
>
>To grant access to a Windows user/group:
>
> CREATE LOGIN [Domain\Username] FROM Windows
>
>To login as this user: first log into Windows, then connect to SQL Server.
>Alternatively, start the application with the "Run As" feature in Windows.
>
>An important point here: once you are at the door to SQL Server, you cannot
>specify a different Windows user than what Windows authenticated you as.
>

--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-security/201007/1
 >> Stay informed about: SQL user mapping for the AD user 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
SQL 2000 SP3 DB User Login Name changes - Server: Win2K3 SP1 [source and destination] SQL: SQL 2000 SP3 [source and destination] SOURCE: I have a SQL 2000 SP3 database ("ABC") at the office that has the following (correct) properties under Users. [ABC was created under SQL 20...

Create user..... -

user to execute nothing but SP in 2005 - Hi All, Can someone please help me with creating a user just to execute store procedure and nothing else. What explicit permission I need to give. I am trying to deny all permission and then just grant Execute (I also tried to grant connect and select...

Can any please tell me how to make a user to see sql jobs. - Can any please tell me how to make a user to see sql jobs. I know sys admins can see the jobs, but i want to give access to a user who is not sys admin. Thanks Raju

'DomainLocalServer$' is not a valid user - I have a cross-databases SQL application on SQL 2000 servers SP4 (db_A on localServer, db_B on remoteServer) on Win2003 on same domain. Linked server is defined as "Be made by the login's current security context". The login account is member...
   Database Forums (Home) -> Security All times are: Pacific Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]