Home Forums SQL Server 2008 Security (SS2K8) How to impersonate an AD Login within a AD Group defined in SQL RE: How to impersonate an AD Login within a AD Group defined in SQL

  • Sure you can: My AD account does not have a Windows SQL Login, but I am a member of a group that does.

    SELECT SUSER_NAME(); returns me (not the group).

    go

    -- '<domain>\<username>' does not have an SQL login, they are a member of an AD group having a Windows login to SQL Server.

    execute as login = '<domain>\<username>';

    SELECT SUSER_NAME(); <-- returns <domain>\<username>

    revert

    SELECT SUSER_NAME(); <-- back to me.