Windows authentication -multiple servers/domains

  • I have a ServerA in DomainA with a user UserA. If there is a ServerB in DomainB with the same username UserA and the same password, can I connect to the sql instance on ServerA from the Server B using windows authentication? Or should the two domains be trusted?

    Thanks for your time

  • you can connect. When you add the login, you can add them from a different domain.

    The recommended procedure, however, is to create a local group on the machine, add the groups from other domains (never users) and then add the local group to SQL Server as a login.

    Steve Jones

    sjones@sqlservercentral.com

    http://www.sqlservercentral.com/columnists/sjones

    The Best of SQL Server Central.com 2002 - http://www.sqlservercentral.com/bestof/

    http://www.dkranch.net

  • Steve-

    But I cannot see the users from the other server or domain from my EM as they are not trusted domains. I could create the user on the local, assign permissions to the user to connect to the SQL instance. Create the same user on the other machine with the same password and try to connect to the SQL instance.

  • Matching usernames and passwords won't work for Windows Authentication. If you have no trust, you'll have to use SQL Authentication.

  • Pass-through Windows authentication is possible. However, I believe the user account must be a local account on the SQL Server box itself. If the username/password matches, you're in.

    Preferably, though, you want to have user accounts from a trusted domain. Of course, consideration goes beyond SQL Server and may not be possible.

    K. Brian Kelley, GSEC

    http://www.truthsolutions.com/

    Author: Start to Finish Guide to SQL Server Performance Monitoring

    http://www.netimpress.com/

    K. Brian Kelley
    @kbriankelley

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply