For the main instance DB1 the user has permission through group wingroup1. On the second instance DB2 (which is called using the four-part notation) they had no permissions so I temporarily gave wingroup1 permission to the database. I will be taking that away today and giving the group GRANT permissions as suggested.
Eh, they must of course be able to connect to the database. I don't know exactly what you mean with "gave permssion", but if you said "CREATE USER [Domain\Wingroup1]" you should not back out that.
[font="Times New Roman"]Erland Sommarskog, SQL Server MVP, www.sommarskog.se[/font]