Home Forums Article Discussions Article Discussions by Author Discuss content posted by Eric Russell Query accounts, domain groups, and members who have admin membership. RE: Query accounts, domain groups, and members who have admin membership.

  • February 9, 2012 at 2:03 pm

    #1445288

    Geoff A (2/9/2012)

    Nice article, but there is an issue with Windows 2008 and xp_logininfo.

    Since my domain is all Windows 2008, the column logininfo_note is always either NULL or xp_logininfo returned error 15404.

    The error is documented here;

    http://matticus-au.blogspot.com/2009/08/windows-2008-and-xplogininfo.html

    The workaround is pretty straight forward, but I personally have not tested it.

    Yes, I too encountered errors resolving some domain groups on some servers. It has to do with parent/child domains, and the organization's network admin would have to move accounts around in Active Directory to really fix it.

    I'd appreciate if someone can suggest a workaround that can be implemented just in the script. Perhaps it can be done using an OPENROWSET and an LDAP query rather than just leveraging xp_logininfo, but that would involve some environment specific coding.

    http://www.databasejournal.com/features/mssql/article.php/3849891/Query-Active-Directory-Data-from-SQL-Server-using-T-SQL.htm

    "Do not seek to follow in the footsteps of the wise. Instead, seek what they sought." - Matsuo Basho