<a href="http://g.adspeed.net/ad.php?do=clk&zid=15220&wd=468&ht=60&pair=as" target="_blank"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15220&wd=468&ht=60&pair=as" alt="i" width="468" height="60"/></a>
Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
<a href="http://g.adspeed.net/ad.php?do=clk&zid=15491&wd=120&ht=300&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15491&wd=120&ht=300&pair=as" alt="i" width="120" height="300"/></a>
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2008
»
Security (SS2K8)
»
Obtaining server roles when logging in via a...
Obtaining server roles when logging in via a windows group
Rate Topic
Display Mode
Topic Options
Author
Message
jm99
jm99
Posted Tuesday, November 24, 2009 9:22 AM
SSC-Enthusiastic
Group: General Forum Members
Last Login: Wednesday, May 01, 2013 3:58 PM
Points: 114,
Visits: 276
Whenever a user logs into SQL Server 2008 via a Windows group how can I determine which server roles are applicable to that user when only the windows group is listed in sys.server_principals
The user and suser functions return information to the user's windows login not the group that they entered SQL Server by.
Help appreciated.
Post #823975
support.sql
support.sql
Posted Sunday, November 29, 2009 4:36 PM
Valued Member
Group: General Forum Members
Last Login: Wednesday, December 02, 2009 2:07 PM
Points: 70,
Visits: 32
You can get the list of Active Directory users for every Group create in SQL Server.
Regards
SNM
Try Free Microsoft SQL Server Data Collector & Performance Monitor.
http://www.analyticsperformance.com
@nalyticsperformance - Microsoft SQL Server & Windows Server Free Data Collector
Post #825946
jm99
jm99
Posted Monday, November 30, 2009 10:51 AM
SSC-Enthusiastic
Group: General Forum Members
Last Login: Wednesday, May 01, 2013 3:58 PM
Points: 114,
Visits: 276
Thanks for the advice. So it looks like I've got to:
1) Create a linked server to OLE DB Provider for Microsoft Directory Services
2) Find out which Windows Group(s) the user belongs to
3) Determine the superset of server-roles that are applicable to the Windows Groups returned in step 2.
A piece of cake considering my LDAP is very rusty
Post #826389
jm99
jm99
Posted Wednesday, December 02, 2009 6:02 AM
SSC-Enthusiastic
Group: General Forum Members
Last Login: Wednesday, May 01, 2013 3:58 PM
Points: 114,
Visits: 276
I also posted this on the SQL Server 2005 Security forum and got the answer to use
IS_SVRROLEMEMBER
which solves my problem.
Post #827373
« Prev Topic
|
Next Topic »
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.
