dbTalk Databases Forums  

Windows authentication

microsoft.public.sqlserver.server microsoft.public.sqlserver.server


Discuss Windows authentication in the microsoft.public.sqlserver.server forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Tony Johansson
 
Posts: n/a

Default Windows authentication - 08-18-2012 , 06:23 AM






Hello!

If I want to add a new user so he can use Windows authentication I assume
that I must do the following.
1. If I use SQLEXPRESS I don't have do do anything because the new user can
access sql server as soon as he can log into windows.
This is because of the existing account named builtin/users as I think. This
exist in the Logins folder in sql server.

2. If I use the default Sql server where I just enter . as the server name I
have to enter the account name in the Logins folder in sql server to make
the login working.
In this default instance there is no builtin/users account so when I try to
login with the new account I get the error that the login account does not
exist but it works when I enter the new account in the Logins folder in sql
server.

//Tony

Reply With Quote
  #2  
Old   
Erland Sommarskog
 
Posts: n/a

Default Re: Windows authentication - 08-18-2012 , 07:26 AM






Tony Johansson (johansson.andersson (AT) telia (DOT) com) writes:
Quote:
If I want to add a new user so he can use Windows authentication I
assume that I must do the following. 1. If I use SQLEXPRESS I don't have
do do anything because the new user can access sql server as soon as he
can log into windows. This is because of the existing account named
builtin/users as I think. This exist in the Logins folder in sql
server.

2. If I use the default Sql server where I just enter . as the server
name I have to enter the account name in the Logins folder in sql server
to make the login working. In this default instance there is no
builtin/users account so when I try to login with the new account I get
the error that the login account does not exist but it works when I
enter the new account in the Logins folder in sql server.
You can add [BUILTIN\Users] as a login on any edition of SQL Server.
The reason it's included yb default on SQL Server Express is that Express
is often used for solution where application and database run on the
same machine. Whereas an instance running Standard or Enterprise Edition
often runs on a dedicated server, why it's not particularly meaningful
to add BUILTIN\Users.

What people typically instead is to grant access to AD groups, so if a
they get a new employee that person does not have to be added to
SQL Server separately.


--
Erland Sommarskog, SQL Server MVP, esquel (AT) sommarskog (DOT) se

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx

Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.