Active Directory Security Groups As Logins

  • we have an enterprise manager-like utility (VB6) which displays a treeview of databases (using DMO) on our development server. depending on their role, i would like to show users only those databases they have access to according to their membership in a certain sql server role.

    we have established global groups at our organizational unit (OU) level in the overall corporate active directory (AD) domain, and made each of these groups a login on the sql server, giving each group access to select databases.

    the problem i am having is resolving the user name (which i capture from the utility at startup) to membership in the OU group. i can determine which sql server roles a login has membership in, but since the login is an OU group, i can't "see" inside that group to determine if the user is a member of the OU group...yikes! how to proceed? thanks in advance.

  • Sounds like a task for some sort of resource kit utility. I know there was a utility that performed this sort of task in NT. Not too sure about W2k and onwards.

    Hope this helps

    Phill Carter

    --------------------

    Colt 45 - the original point and click interface

    --------------------
    Colt 45 - the original point and click interface

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply