Local system fails the recommendation on two points:

- It is a local, not a domain account.

- It is, by rule, a member of the administrators group (actually it has more...

It could also be the case where the SQL Server is having issues talking with the DCs. The application and system event logs would tell the story there.

To start with, you have to grant CREATE PROCEDURE permissions. Looks like you've got that.

If it's in a schema the user doesn't own, you've got to grant ALTER SCHEMA permissions,...

Allen Krehbiel (4/21/2011)

---

That would be an option, although we manage many of our customers' access to our dbs via windows auth as well, and security restrictions prevent us from configuring...

The dev and dbo schemas share the same owner. That's why the ownership chaining is working. There are two ways of attacking this:

1) By the use of schema. Segregate objects...

Is there a reason you don't set up all these domains to have an external trust relationship where those domains trust the domain where your user accounts reside? That would...

That seems to be the real issue. Are you sure the username wasn't mistyped and that it existed in the database as a user?

That's why I indicated if you permit access to it. And remember, attacking servers isn't just about what they contain with respect to data. It's also to see what other...

Short of using something like a server-level DDL trigger, no.

The public role has a lot of grants, that is true, but it should typically be left alone. Otherwise you could put your SQL Server in an unsupported state.

Also,...

dioscoredes (4/20/2011)

---

When a connection to a named instance of the sql server is made, the connection goes to the sql browser service which listens on the UDP port 1434 (so...

jeff.mason (4/19/2011)

---

The problem we have is that 1) we are the ones who need the info, and they don't know what they are seeking and 2) getting the AD team...

jeff.mason (4/19/2011)

---

Of course, all of the solutions listed assume that you have a domain admin-level account that can go out and do this searching. If you work in a...

Craig A. Silvis (4/19/2011)

---

I had downloaded and tested the Quest tool too but I still like using PowerShell overall because it does not depend on a third party tool.

There are...

Have you tried Quest's Discovery Wizard? It's free, too.

Also, when we...