IMO DENY is the way to go !
It will prevent users of the windows group from accessing your db.
Maybe users are member of more then one group, so they may still be able to login because of group membership of another group.
Deny would only work for that group, but not in the case I described.
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me