February 11, 2016 at 8:06 am
I'm looking for a way to simplify managing the users for one particular application on my servers. The application itself uses MS Access to hit the SQL database (yeah, yeah, I know. I inherited this, and I'm not a developer and the owner of the app has no desire or inclination to change it) so the users sign into their workstations with their AD accounts. Said accounts then need to be added as logins to the SQL Server and Users in the DB in question.
I'd like to simplify this by clumping them all into a Domain Group, then adding the group itself. Privileges would be kept the same for the group (Public on the server, a custom DB Role in the DB.) BUT I'm also required to audit logins etc.
My question is, when a user who is a member of a group which has access to SQL connects, does the group name or the user name get recorded? IE would I see Domain\SQLGroup show up, or Domain\MemberOfSQLGroup? I would expect the latter (the user name) as all a group is, is a collection of users, in which case I'm golden with this method.
I am planning to test it out this weekend on my home lab to verify, but I figured it couldn't hurt to ask here as well. I did do a quick Google for the answer but didn't find what I was looking for.
Thanks
Jason
February 11, 2016 at 8:30 am
You will see the Windows user name, not the group name.
[font="Times New Roman"]Erland Sommarskog, SQL Server MVP, www.sommarskog.se[/font]
February 15, 2016 at 7:24 am
Erland Sommarskog (2/11/2016)
You will see the Windows user name, not the group name.
Thank you good sir!
Gave it a test out on my home lab and you were absolutely correct!
(Not that I didn't think you were, but this way I can tell my bosses that I've tested this out myself (makes them happier)
Once again, thanks!
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply