• Thom A - Wednesday, November 15, 2017 4:14 AM

    AD Groups can't have default databases assigned, thus logins connecting via them will default to master. This either means that the person connecting is specifying a default database in their connection string they do not have access to, or their account has their own login on the SQL Server, which has a default database that (again) they do not have an attached user account for.

    Are you sure about that, Thom?  It's not documented on the CREATE LOGIN page, and I just successfully ran this command on a SQL Server 2014 server:

    CREATE LOGIN [DomainName\GroupName] FROM WINDOWS WITH DEFAULT_DATABASE = John

    You may be confusing this with default schemas not being able to be assigned to users mapped to logins that are Windows groups.

    John