Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Orphaned users versus loginless users Expand / Collapse
Author
Message
Posted Thursday, February 14, 2013 3:59 AM


SSC Eights!

SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!

Group: General Forum Members
Last Login: Thursday, September 18, 2014 5:33 AM
Points: 920, Visits: 371
Hi forum,

a short question:
What is the difference between orphaned users and loginless users and how can I seperate them from eachother?
Is it correct to say that orphaned users don't have an instance login but do have a db login and that loginless users have an instance login but not a db login since that goes via the application that impersonates a user?

thanks in advance for helping me clearing this out.
Vera
Post #1419942
Posted Thursday, February 14, 2013 4:13 AM
SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Tuesday, September 16, 2014 8:38 AM
Points: 223, Visits: 1,725
According to http://msdn.microsoft.com/en-us/library/ms175475.aspx
"
A database user for which the corresponding SQL Server login is undefined or is incorrectly defined on a server instance cannot log in to the instance. Such a user is said to be an orphaned user of the database on that server instance. A database user can become orphaned if the corresponding SQL Server login is dropped. Also, a database user can become orphaned after a database is restored or attached to a different instance of SQL Server. Orphaning can happen if the database user is mapped to a SID that is not present in the new server instance.
"

Both, users with wrong sid and users without login, no matter whether droped or just not exist after restore, are orphaned users
Post #1419954
Posted Thursday, February 14, 2013 4:18 AM


SSC-Dedicated

SSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-Dedicated

Group: General Forum Members
Last Login: Today @ 5:02 AM
Points: 39,866, Visits: 36,207
Vera-428803 (2/14/2013)
Is it correct to say that orphaned users don't have an instance login but do have a db login and that loginless users have an instance login but not a db login since that goes via the application that impersonates a user?


There's no such thing as a database login (not in 2008 anyway)

Orphaned users are ones that should have an associated login, but don't because of the DB being moved. Loginless users never had an associated login and shouldn't have one.



Gail Shaw
Microsoft Certified Master: SQL Server 2008, MVP
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Post #1419961
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse