Finding the Group

• Steve Jones - SSC Editor

  SSC Guru

  Points: 738140

  More actions

  June 23, 2021 at 12:00 am

  #3887506

  Comments posted to this topic are about the item Finding the Group

• Rod at work

  SSC-Dedicated

  Points: 34056

  More actions

  June 23, 2021 at 2:03 pm

  #3899687

  You need to have the right privileges to run sp_logininfo. I don't, on some of our systems.

  Kindest Regards, Rod Connect with me on LinkedIn.

• thisisjoy

  SSC Eights!

  Points: 834

  More actions

  June 23, 2021 at 3:20 pm

  #3899710

  If your enterprise has multiple domains and the user or group domain is different from the server domain then xp_logininfo may not be able to provide any information on that user or group.  For example, we have server in Domain A and group DomainA\ADgroup.  Inside that group are members DomainB\Member1 and DomainB\Member2.  xp_logininfo can list the DomainB members in DomainA\ADgroup.  And those members have access.  But if I use xp_logininfo with login DomainB\Member1 I get error "Could not obtain information about Windows NT group/user".

• sknox

  SSChampion

  Points: 12388

  More actions

  June 23, 2021 at 4:55 pm

  #3899764

  I think the answer could use a bit of clarification. This only works if the group is assigned a login in SQL Server.

  Also, re: "A caveat here is that the first group granted access to SQL Server is returned unless the ALL value is used for the @privilege parameter." If the AD user account has an explicit login as well, that will be the first/only row returned, and permission path will be NULL.