It's not that someone leaving is unnoticed. It's that we forget to revoke all their access. When someone leaves, I'm usually thinking about other things (workload I pick up...

In addition to what Frederico notes, what about separations/terminations? Easy to leave a security hole as the DBAs aren't notified as people move/leave. I would always have windows auth/Kerberos...

that approach would not be allowed in many shops - access to any (windows) system should be controlled by AD groups and membership of those managed by the appropriate...

• Create login (AD group)
• Add AD Group to required database
• Grant Execute to the required SP's/Functions

DO NOT add individual users to the database - always a group. and...

Assuming the stored procedures contain no dynamic SQL, you shouldn't need EXECUTE AS for this at all. If RO and dbo are both owned by dbo, SQL Server's ownership...

Thank you, I'll try that Monday. My external access...

Thank you, I'll try that Monday. My external access is limited to my normal account,...

From what you've described, it sounds like an in-place upgrade isn't supported in your setup, which is why the installation keeps failing. The most reliable option is to install...

• This reply was modified 2 months, 1 weeks ago by pdanes.

FWIW - I hope I don't waste more bandwidth - Maybe doublecheck if Express Edition will be able to handle your db(s), load, ... and how you will replace...

• This reply was modified 2 months, 1 weeks ago by pdanes.

Ah, okay - that's the piece I was missing. I didn't realize that going from an older version standard to a newer version Express is considered a downgrade. Thanks for...

I did, before I even posted this question. One of the reasons for these forums is to clear up things that are not obvious from...

Sorry, I don't understand. I asked if it is possible to do an in-place upgrade. You say that it IS possible, but that I have to a side-by-side install and...

Nice. I use similar setups in app-level code, but I never thought to do it in SQL Server. Definitely going into the toolbox.

You're right, of course, but I wouldn't want people to all become too smart. I make a lot of money converting exactly that kind of nonsense into databases, and then...

Thank you, that looks worth considering, although migrating the entire setup to Azure is much more work than I had hoped for just a (seemingly) simple authentication problem. And I...