Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Length limitation on domain accounts? Expand / Collapse
Author
Message
Posted Tuesday, April 2, 2013 11:11 AM
SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: Wednesday, April 23, 2014 6:45 AM
Points: 104, Visits: 389
I'm attempting to create a login from a Windows account like so:
USE [master]
GO
CREATE LOGIN [DOMAIN\MyLongerThan20CharacterServiceAccount] FROM WINDOWS WITH DEFAULT_DATABASE=[master];
GO

But this fails with the error:
Msg 15401, Level 16, State 1, Line 1
Windows NT user or group 'DOMAIN\MyLongerThan20CharacterServiceAccountnot found. Check the name again.


This account however does exist. If I attempt to shorten it to 20 characters (pre-Windows 2000 format) it works!
USE [master]
GO
CREATE LOGIN [DOMAIN\MyLongerThan20Charac] FROM WINDOWS WITH DEFAULT_DATABASE=[master];
GO

Has anyone ran across this 20 character limitation before? I'm assuming there is a simple fix or configuration setting to correct this behavior but I'm hoping someone can chime in on what that is.
Post #1438014
Posted Wednesday, April 3, 2013 2:47 AM
SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: Wednesday, April 23, 2014 6:45 AM
Points: 104, Visits: 389
Evidently it's a limitation of the SAM Account Name attribute in order to be backwards compatible with older clients - http://msdn.microsoft.com/en-us/library/ms679635.aspx.
Post #1438210
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse