Windows authentication - 08-18-2012 , 06:23 AM
If I want to add a new user so he can use Windows authentication I assume
that I must do the following.
1. If I use SQLEXPRESS I don't have do do anything because the new user can
access sql server as soon as he can log into windows.
This is because of the existing account named builtin/users as I think. This
exist in the Logins folder in sql server.
2. If I use the default Sql server where I just enter . as the server name I
have to enter the account name in the Logins folder in sql server to make
the login working.
In this default instance there is no builtin/users account so when I try to
login with the new account I get the error that the login account does not
exist but it works when I enter the new account in the Logins folder in sql
Re: Windows authentication - 08-18-2012 , 07:26 AM
Tony Johansson (johansson.andersson (AT) telia (DOT) com) writes:
The reason it's included yb default on SQL Server Express is that Express
is often used for solution where application and database run on the
same machine. Whereas an instance running Standard or Enterprise Edition
often runs on a dedicated server, why it's not particularly meaningful
to add BUILTIN\Users.
What people typically instead is to grant access to AD groups, so if a
they get a new employee that person does not have to be added to
SQL Server separately.
Erland Sommarskog, SQL Server MVP, esquel (AT) sommarskog (DOT) se
Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx