all groups > sql server connect > june 2003 >
You're in the

sql server connect

group:

Newbie - SQL authentication question


Newbie - SQL authentication question Pat Kelecy
6/27/2003 3:16:22 PM
sql server connect: I was running an installation (wizard) for an application that, as part of
the installation process, creates a database in SQL. To to this it required
that I provide a username and password. Since SQL2K is configured for
"mixed mode" authentication, I thought I could provide any valid AD
adminstrator account and have it work. But it would only accept the
administrator username and passwork that we orignially set up for it (SQL) -
(I had to really dig around to find that!). I'm confused as to why a valid
AD administrator account didn't work. Could someone shed some light on
this? I am very new to SQL2000 an am trying to understand how it works
(mainly from an application connectivity point of view - getting things to
work with it). I have a number of applications that use it.

Thanks for any help. I greatly appreciate it. -Pat

Re: Newbie - SQL authentication question BJ Freeman
6/27/2003 4:20:02 PM
the standardard way is to use the SQL db sa account. this is because the
other accounts may not have SA rights.



[quoted text, click to view]

Re: Newbie - SQL authentication question Pat Kelecy
6/27/2003 10:22:53 PM
ok. - So it depends on whether SA (Sql Administrator?) rights have been
assigned a user's account or not. So I take it the"sa" account is a built
in administrator account in SQL that always provides this (like the
Administrator account in Win2K). Right?

Thanks for the clarification. I appreciate it. -Pat


[quoted text, click to view]

Re: Newbie - SQL authentication question BJ Freeman
6/28/2003 6:22:33 AM
Just to clarify, I am using sQL 7.0 so there might be changes in SQL 2K that
I am not aware of.
Unless the Win2K account is assigned in the SQL security, it should not have
SA abilities. The SA in SQL is the Built in Administrator. When doing
Creation of DB's , or global view, tables, stored procudures, then need to
do this with SA, If you create tables, views, storedprocudures that the SQL
account is not the owner then noone but that user can see them.

open up SQL server Manager and look at login if the account is not there,
then it has no rights to the SQL server.

Note: the Mix mode, where NT accounts have rights my have changed how it is
done with Win 2K. So I am not an authority on this.

[quoted text, click to view]

Re: Newbie - SQL authentication question Erland Sommarskog
6/28/2003 10:38:27 PM
Pat Kelecy (pat@mp-m.com) writes:
[quoted text, click to view]

You need use sp_grantlogin to the Windows user that you want to login
with. If that is a administrator account, it will indeed also
have administrator access in SQL Server.


--
Erland Sommarskog, SQL Server MVP, sommar@algonet.se

Books Online for SQL Server SP3 at
AddThis Social Bookmark Button