Active Directory Group Membership

  • we have an enterprise manager-like utility (VB6) which displays a treeview of databases (using DMO) on our development server. depending on their role, i would like to show users only those databases they have access to according to their membership in a certain sql server role.

    we have established global groups at our organizational unit (OU) level in the overall corporate active directory (AD) domain, and made each of these groups a login on the sql server, giving each group access to select databases.

    the problem i am having is resolving the user name (which i capture from the utility at startup) to membership in the OU group. i can determine which sql server roles a login has membership in, but since the login is an OU group, i can't "see" inside that group to determine if the user is a member of the OU group...yikes! how to proceed? thanks in advance.

    (originally posted in the Administration Forum...)

  • I'm not that great at this, but I think you'd need to query the ADSI provider using LDAP and get a collection of the group's members.

    Steve Jones

    sjones@sqlservercentral.com

    http://www.sqlservercentral.com/columnists/sjones

    The Best of SQL Server Central.com 2002 - http://www.sqlservercentral.com/bestof/

    http://www.dkranch.net

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply