InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comSat, 25 May 2013 19:13:29 GMT20http://www.sqlservercentral.com/Forums/Topic757624-146-1.aspxAre your users logging into that machine - or are they logging into their own machines and trying to connect? If they are logging into their own machines, are they authenticating using a domain account or local account?For this to work, they would need to login to their machines with a domain account - and you would have to add their domain logins to the local group on that machine.Sun, 25 Jul 2010 18:49:28 GMTJeffrey Williams 3188http://www.sqlservercentral.com/Forums/Topic757624-146-1.aspxwhat the original poster calls a "group" is what books on line calls a "role". you typically create a role and add the expected rights tot eh role, then add users to the role.here's a nice script i like to use as an example:[code]create database WhateverGOUSE WhateverCREATE ROLE [ReallyReadOnly] --give reader rights to this group ALTER AUTHORIZATION ON SCHEMA::[db_datareader] TO [ReallyReadOnly] --explicitly DENY access to writing ALTER AUTHORIZATION ON SCHEMA::[DB_DenyDataWriter] TO [ReallyReadOnly] GRANT EXECUTE TO [ReallyReadOnly]--create the Role for my Dev guys, who create tables and procsCREATE ROLE [WhateverDEVAdmins] ALTER AUTHORIZATION ON SCHEMA::[db_ddladmin] TO [WhateverDEVAdmins]ALTER AUTHORIZATION ON SCHEMA::[db_datareader] TO [WhateverDEVAdmins]ALTER AUTHORIZATION ON SCHEMA::[db_datawriter] TO [WhateverDEVAdmins]GRANT EXECUTE,ALTER TO [WhateverDEVAdmins]--create role for my normal usersCREATE ROLE [WhateverDEVUsers] ALTER AUTHORIZATION ON SCHEMA::[db_datareader] TO [WhateverDEVUsers]ALTER AUTHORIZATION ON SCHEMA::[db_datawriter] TO [WhateverDEVUsers]GRANT EXECUTE TO [WhateverDEVUsers]--now add specific users to nearly-AdminsIF NOT EXISTS (SELECT * FROM MASTER.dbo.syslogins WHERE name = N'bob')BEGINEXEC MASTER.dbo.sp_addlogin @loginame = N'bob', @passwd = 'NotARealPassword', @defdb = N'WHATEVER', @deflanguage = N'us_english'--add this user to permit read and writeENDIF NOT EXISTS (SELECT * FROM MASTER.dbo.syslogins WHERE name = N'jeff')BEGINEXEC MASTER.dbo.sp_addlogin @loginame = N'jeff', @passwd = 'NotARealPassword', @defdb = N'WHATEVER', @deflanguage = N'us_english'ENDUSE [WHATEVER]--make a user in the db for the matching loginCREATE USER [bob] FOR LOGIN [bob]CREATE USER [jeff] FOR LOGIN [jeff]--add these logs to the roleEXEC sp_addrolemember N'WhateverDEVAdmins', N'bob'EXEC sp_addrolemember N'WhateverDEVAdmins', N'jeff'CREATE LOGIN [NT AUTHORITY\Authenticated Users] FROM WINDOWS WITH DEFAULT_DATABASE=[WHATEVER]CREATE USER [NT AUTHORITY\Authenticated Users] FOR LOGIN [NT AUTHORITY\Authenticated Users]EXEC sp_addrolemember N'WhateverDEVUsers', N'NT AUTHORITY\Authenticated Users'[/code]Sun, 25 Jul 2010 16:05:04 GMTLowellhttp://www.sqlservercentral.com/Forums/Topic757624-146-1.aspxHi Friends,I am unable to understand what exactly SQL Server group is ?????can anyone explain and steps to create it....????Sun, 25 Jul 2010 14:45:14 GMTmohd.sqlhttp://www.sqlservercentral.com/Forums/Topic757624-146-1.aspxHi anybody able to help me out on this?Rgds,Anand.Wed, 22 Jul 2009 22:18:37 GMTkolangara_anandhttp://www.sqlservercentral.com/Forums/Topic757624-146-1.aspxHi,I have created a user group in my computer. I want to now associate these users to a particular db. I want these users to be authenticated by Windows. To achevie this I first created the User group SQL_users on my computer and did the rest as below.[code][USE MASTER]CREATE LOGIN [MyComp\SQL_users]FROM WINDOWSWITH DEFAULT_DATABASE = TEST[USE TEST]CREATE USER SQL_users FOR LOGIN [MyComp\SQL_users] ; GO grant CREATE FUNCTION to [SQL_users]grant CREATE PROCEDURE to [SQL_users] grant DELETE to [SQL_users]grant EXECUTE to [SQL_users]grant INSERT to [SQL_users]grant UPDATE to [SQL_users]grant SELECT to [SQL_users]GRANT CONNECT to [SQL_users]go[/code]However even with this the users in the group were not able to connect to the database.Please note I have allowed mixed mode authentication for this server. Also in the SQL Surface Area configuration I have enabled the option 'Local and Remote Connections' Using TCP/IP only.However I am still running into the ubiquitous 18456 Error Message.Is there something still which I have to do before the members in the Windows Group SQL_users can login to the DB.Regards,AnandWed, 22 Jul 2009 10:07:50 GMTkolangara_anand