Should A Sysadmin Have Local Admin Rights On Server?

Apr 27, 2006

Hi,

The company I work for outsources all its non-development IT. So all windows servers are administered by an outside company. Lately we have purchased SQL Server 2005, along with a dedicated Windows Server 2003 server. I am the sole administrator of this SQL Server, and so have sysadmin rights. However because the outside company is responsible for all windows servers, they are very reluctant to grant me local administrator rights on the server. This has been causing problems, partly because I have to go through them for many simple requests (such as moving database files, or changing SQL Server configuration files), and partly because certain functionality doesn't seem to work for non-administrators (such as the use of Database Mail and full access to Reporting Services).

I want to challenge the decision and gain local admin rights to the server. Would anyone have further reasons why a sysadmin should also have local admin rights? Is this common practice, or are sysadmins often denied admin access to the server?

Any thoughts would be appreciated.

Thanks, Matt

View 4 Replies


ADVERTISEMENT

SQL Server Admin 2014 :: Does DBCC LOGINFO Require SysAdmin Rights

Sep 28, 2015

DBCC LogInfo command require SysAdmin rights?

View 2 Replies View Related

SQL 2012 :: Create Login With Sysadmin And Add To Local Server Admin Group

Apr 30, 2015

Need script for below.

1)Add the user ''ADabc' to local admin group in server.
2)Create login 'ADabc' and Grant sysadmin access for ADabc

View 3 Replies View Related

Service Accounts, Local Admin, And Sysadmin Question!

Oct 2, 2007

Hi,

Re: SQL Server 2005

We have defined a local administrator to be the SQL Server and SQL Server Agent services user, and is also the job step owner for some SSIS packages I am running.

My question is, isn't by default a local administrator ALSO granted sysadmin in SQL Server? According to this link, it seems to imply this:

http://msdn2.microsoft.com/en-us/library/ms143504.aspx

However, I am having some permissions problems with the local adminstrator account (i.e. SQL Server agent account) when it runs the job. The error is that it doesn't have execute permissions on sp_dts_addlogentry.

How can this be, if it's granted sysadmin?

Thanks



View 6 Replies View Related

Creating SSIS Package SQL Server Agent Job Without Sysadmin Rights

Mar 12, 2008

Hi

I have a problem i receive the following error message when i try to add an new step into a SQL Server Agent job :

Failed to retrieve data for this request. (Microsoft.SqlServer.SmoEnum)
Additional information:
An exception occured while executing a Transact-SQL statement or batch.
(Microsoft.SqlServer.ConnectionInfo)
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction
The current transaction cannot be committed and cannot support operations that write to the log file. Roll back the transaction.(Microsoft SQL Server, Error: 3930)


This error pops up right after i change the type of the step to "SQL Server Intergration Services Package"

I have made the following configurations:

The user group (windows group) that the user belongs has the following roles in msdb :

db_dtsadmin
db_dtsltuser
db_dtsoperator
SQLAgentOperatorRole
SQLAgentReaderRole
SQLAgentUserRole

i have made a proxy to sql server agent which has the following subsystems :

"SQL Server Integration Services Provider" the proxy is tied to the same login which has those SQLagent and dts roles in msdb database.

Im using windows authentication and the user that logs into the sql server is in the same group that i have set all of the rights.

Ps. Clearly im missing some role or right somewhere because as soon as i give the group sysadmin role then all the users in that group can create SSIS steps in the agent.

Ps. Ps. I have been living under the impression that i dont have to give sysadmin rights to people that create ssis packages and schedule then with the agent.

View 1 Replies View Related

I Need To Give DBA Full Admin Rights To SQL 2005 Without OS Windows Rights, Can Anyone Help Please!!

Jul 12, 2007

The DBA at our location is demanding local admin (windows) right's to the box so he can function. Right now when he logs in i have given him right's to the inetpub directory, sql directory, i have set him as a sysadmin on sql2005 and gone into the http:\localhost
eports and set him up as a system manager and under site priveledges set him as a sys admin. When he tries to login and configure the report server he gets the following error:



Title-Reporting services configuration manager

Error-There was an error refreshing the UI. bla bla bla

A WMI error has occurred and no additional error information is availiable



Title-Reporting services configuration manager

Error-There was an error while switching panels. The most likely cause is an error retrieving WMI properties. bla bla bla

A WMI error has occurred and no additional error information is availiable



then when he's in sql server 2005 surface area configuation

Title-Surface Area Configuration

Error-Access denied (system.management)



Is there any documentation or anythign anyone can tell me that i can do to give this DBA full access to configure and admin the SQL portion of his system without giving him admin rights to the OS???



Please help!!



Thanks for any time anyone has taken to review this thread!!

View 8 Replies View Related

Setting Admin Rights To Report Manager, SQL Server Express 2005 On Vista Business

Mar 7, 2007

Hi all,

I'm a newbie to Reporting Services so please forgive my ignorance...

I've recently installed SQL Server Express 2005 with Reporting Services on my Vista Business Notebook (with no network connections) and have installed VS C# Express as well as the Business Intelligence Studio to create reports.

My C# application can connect to SQL Server fine, however, the reports I created with Business Studio refuses to deploy to the server due to the following reason:

"The permissions granted to user 'localhostJenny' are insufficient for
performing this operation".

I find this odd as I've been able to deploy reports on my other Windows XP machine (with SQL Server Express) no probs at all. Additionally, I cannot see the 'Site settings' link within Report Manager (Web) that I'd normally get with an admin account (i.e. on my Win. XP machine). Various sources indicate that my account has insufficient access rights to view this.

Having browsed through seemingly endless blogs and forums, I suspect that my local account has not been configured to access the Report Manager web client to publish, manage and administer the site.

I have tried the surface area tool for SQL Server, but I suspect that this is relevant only to SQL Server DB access and management. Adding an administrator here does nothing.

The question is, how can I grant access to myself (local account) to allow me to publish reports via business studio, and at the same time - administer Report Manager Site Settings - on my vista notebook??

I would be extremely grateful for any help on this matter - I've tried ceaseless reinstallations, but to no avail!


Many thanks in advance,

Jenny

View 5 Replies View Related

Administrative Rights For Local Machine To Deploy Dynamically Created Report From Web App To Report Server

Feb 5, 2007

The current way I have my asp.net 2.0 web app running reports is, based on an
interface the user selects the criteria for a report. The .RDL file is created
dynamically based on the user's selections.
I then need to SOAP the dynamically created report to the report server and
then the report runs fine.
BUT it requires Adminstrative rights to do this. Can this be accomplished
without giving the local machine admin rights. I am sorry if this question
has been answered before but i have not been up here in a while.

View 1 Replies View Related

SQL USER's ADMIN RIGHTS ON RESTORED DATABASE

Aug 22, 2007

Thanks in advance for help.

Could someone please help me for SWL backup restoration and db by user

I restored SQL 7.0 database to SQL 2000. ( by creating empty db on SQL 2000 and restored from SQL 7 backup) -- restore ok..
I need to use same SQL user which is admin for DB on SQL 7, for SQL 2000 also. ( DB user is sql user not domain user)
I put mixed authentication mode ( windows and SQL) in SQL 2000 enterprises manager security tab setting.
I can see DB user is available in DB user list on restored DB but can not access DB when I try to access from query analyser
I tried to create new login with same name as it was in SQL 7 and tried to give full admin access on SQL 2000 enterprise manager but I get error 21002:[ SQL DMO] User 'user' already exists.

Kind Regards
Sunod

View 1 Replies View Related

SQL Server Admin 2014 :: Cannot Decrypt Encrypted Columns From Database Backup On Local Machine

Jun 29, 2015

I've a SQL server 2014 running on one of our server. We're in the process of implementing security steps for our databases. I've encrypted a column in one of the table in the database on the server. The issue is when I restore the backup on my local SQL server and run a query to decrypt the column data it gives me null values. On the other end when I decrypt the column data on the main server it works fine. I found a thread on this forum which states to do the following when restoring the encrypted database on different server.

USE [master];
GO
OPEN MASTER KEY DECRYPTION BY PASSWORD = 'StrongPassword';
ALTER MASTER KEY ADD ENCRYPTION BY SERVICE MASTER KEY;
GO

select File_Name
, CONVERT(nvarchar,DECRYPTBYKEY(File_Name))
from [test].[dbo].[Orders_Customer]

I tried doing above still no luck.

View 3 Replies View Related

Installing SQL 2005 In An Existing W2k3 Cluster - Is Domain Admin Rights Required?

Apr 17, 2008

I have DBA that is convinced that they need domain admin rights to install SQL 2005 into an existing cluster. The domain groups and service accounts for SQL have been created already. Is having domain admin rights required during the install of SQL 2005 in a cluster?

View 1 Replies View Related

SQL Server Admin 2014 :: Cannot Connect To Named Instance (2nd Instance) From Local SSMS

Jul 22, 2015

I've two instances(Default, Named[dynamicsFINANCE]) running on SQL server 2014. However, when I try to connect to named instance say (dynamicsFINANCE) using SQL authentication from local SSMS, I get below error message:

A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified) (Microsoft SQL Server, Error: -1)

I assigned a static port number to the named instance [dynamicsFINANCE] 1450. I also setup the firewall rule to allow access to Port 1450.

View 5 Replies View Related

DBA Contract Without Local Admin Priveleges

Apr 30, 2007

O what a place to be I started this Contract as an (Interim) for a new DBA role, for an application support Company last month & all was going well. The User Application is run via Citrix against multiple Hosted Sybase ASA Databases. I introduced SQL 2005 with Reporting Services as a mixed Data Mart Remote Query via ODBC Linked Servers setup. Because they had never had a DBA before the Data I was able to pull from over thirty seperate databases into one and present via Reporting Services has blown them away. And then one day the Senior Support Analyst told me he had put the main most important Sybase Database on a completely seperate domain he had created(with no Trust between the two) , because he was unable to secure the existing domain against unauhorized remote internet intrusion & Viruses. (I never liked the idea that hosted customers were domainusers on the Corporate network) To add insult to injury he then told me to install & maintain another SQL Box on the new domain, OK so far. I logged into the supoposed new box via citrix & then remote desktop, and to my disbelief he had the desktop locked down - no access to control panel or anything - he asked me why i needed access - I told him - he asked me why I need to have reboot priveleges - I told him. So now he's installed 2005 himself in the vain hope I can work without Local Admin privelages or need to unlock the Desktop - he certainly won't give me Domain Admin. I Just cannot believe I'm unable to persuade him to Unlock the Desktop & have even threatened to walk out unless he lets me do my Job. He probably does'nt like me but there can be absolutely no question about my abilities or accessing data that i should'nt. He's basically read a Deny by Default article and expects me to start of as a user with a locked desktop and then request & justify escalating my security from there. Is this possible ? Good Grief :eek: Any ideas what I should do ? Thanks GW

View 12 Replies View Related

Local Admin On Report Services

Feb 6, 2008

Good grief the tech are telling me that the reason I cant connect to report services is becasue I need to be a Local Admin, I can connec to the database engine but not Report services. Yikes

help??

View 6 Replies View Related

SA Password Is Not Working And Local Admin. Can't

Jun 4, 2008

Hi there,
i have a test sql server. personal Edition Sp2. i loggoed on with a domain account that is part of local admin group. i was surprised when i found that i don't have enough access to work on the database like create and restore databases
i tried to log on with sa but password not succeeded i don't remember that i had changed the password or put a difficult one.
i also tried from the local administrator i also couldn't get the permission !!
what could gone wrong ? thanks god its only a test server :S

View 3 Replies View Related

Access To Database By Local Admin User

Feb 10, 2014

I am newbie to SQL.I need to create an application will run on server, and of course will be installed by using admin user. I can use the install user to access to database on that server?

View 1 Replies View Related

Shared Hosting: Web Data Admin And Local Testing

Dec 18, 2004

I just recently added 30MB of SQL Server database space on my Share hosting account.

I want to put the SQL Web Data Administrator on the server but it is an MSI file and I cannot figure out how to install it.

Also, I will be testing my .Net pages on my local machine. How do I go about it without accessing the SQL Server on my host? I used MS Access before and I have a copy of both databases on my local machine and on the server. I'm thinking of using MSDE on my machine and I just change the connection string when I upload my code. Is this a good idea or is there a better alternative?

Thanks.

View 1 Replies View Related

Required Permissions (no Local Admin) For Deploying A Report

May 7, 2007

Hi all,

what are the minimum required permissions for being allowed to deploy a report? When I try to deploy a report in BIDS I get the error message that my user has not sufficient rights for doing so.

Some key data for my configuration:


Windows Server 2003 Standard Edition with Service Pack 1
SQL Server 2005 Standard Edition with Service Pack 1
I'm not a local administrator, but I have administration rights for SQL Server and Analysis Services
I'm in the Reporting Services' system administrator and system user groups

I can access http://localhost/Reports, but not http://localhost/ReportServer
I have access to the directory (incl. subdirectories) MSSQL.2, but not to MSSQL.1MSSQL and MSSQL3Reporting Services
I can't run the Reporting Services Configuration Tool (see http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1565766&SiteID=1)
I can't connect to Reporting Services in SQL Server Management Studio

My question is (as I have already mentioned in the beginning): what are the minimum rights the IT administrator has to assign to my user so that I'll be able to deploy reports? Giving me local administrator rights is not possible.

Thanx in advance and kind regards,
Gerald



Update:

In the meantime I have found out, that I'm most probably not a member of the Publisher role. But although I am in the System Administrator role I cannot assign myself to this role. When going to http://localhost/Reports the required links are just not visible. Is this because I'm not a member of the groups SQLServer2005ReportServerUser$... and SQLServer2005ReportingServicesWebServerUser$... ?



View 4 Replies View Related

SQL 2005 Express Local Admin Access Denied

Jan 3, 2007

I am using a standard installation of SQL 2005 Express installed with Visual C# Express. I have tried several connection strings, have tried connecting different databases, all of which end up giving me access denied for user <machineName>Greg (Greg is the local admin account for this PC. I found this guideline for connectivity questions (http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=362498&SiteID=1), and have gone through it all, posting the answers to questions here. One thing that may be different about this machine is that it is a tablet PC (WinXP Tablet edition) and I am running VMWare Server. I also tried loading it on a WinXP Pro workstation with no VMWare, and have gotten the same results. Any help will be greatly appreciated.

My connection string:
@"Server=(local);Integrated Security=SSPI;Database=Database1");

Client error message:
Cannot open database "Database1" requested by the login. The login failed. Login failed for user 'GREGBORGGreg'.

Client is local to the SQL 2005 Express - this is an application running on a local PC.

I am able to ping -a GREGBORG (as well as localhost)

I am able to telnet to port 1433 of my local machine, although Ctrl+[ does not give me an SQL prompt

I am using ADO.NET 2.0 and Visual C# 2005 Express

I have enabled Shared memory, named pipes and TCP/IP.

I have no alias' configured, and am not requiring encryption.

=========================
I am using SQL 2005 Express loaded on Windows XP tablet edition.

The SQL browser is not enabled, and it says that it has no enabled devices associated with it.

SQL Server is running under the Network System account

I have tried running it firewalled and not firewalled

I am running Clamwin anti-virus


From the ERRORLOG:
2007-01-03 12:29:56.19 Logon Error: 18456, Severity: 14, State: 16.
2007-01-03 12:29:56.19 Logon Login failed for user 'GREGBORGGreg'. [CLIENT: 10.101.1.200]

From the command prompt I get:
C:Documents and SettingsGreg>osql -E -S (local)sqlexpress
1> use Database1
2> go
Msg 911, Level 16, State 1, Server GREGBORGSQLEXPRESS, Line 1
Could not locate entry in sysdatabases for database 'Database1'. No entry found
with that name. Make sure that the name is entered correctly.

When I try to attach Database1 in my 'My Documents' folder, it says that access is denied to the file.


I added a user via SQL Management Studio Express and then received the error:

C:Documents and SettingsGreg>osql -S gregborgsqlexpress -U Greg -P ********
1> sp_attach_db "Database1", "C:documents and SettingsGregMy DocumentsVisual
Studio 2005Projects est_SQL est_SQLDatabase1.mdf"
2> go
Msg 5133, Level 16, State 1, Server GREGBORGSQLEXPRESS, Line 1
Directory lookup for the file "C:documents and SettingsGregMy
DocumentsVisual Studio 2005Projects est_SQL est_SQLDatabase1.mdf" failed
with the operating system error 5(Access is denied.).
1> use northwind
2> go
Msg 945, Level 14, State 2, Server GREGBORGSQLEXPRESS, Line 1
Database 'Northwind' cannot be opened due to inaccessible files or insufficient
memory or disk space. See the SQL Server errorlog for details.

In the ERRORLOG I have:
2007-01-03 12:38:27.25 spid51 Error: 5173, Severity: 16, State: 1.
2007-01-03 12:38:27.25 spid51 One or more files do not match the primary file of the database. If you are attempting to attach a database, retry the operation with the correct files. If this is an existing database, the file may be corrupted and should be restored from a backup.
2007-01-03 13:07:16.82 spid51 Using 'xpstar90.dll' version '2005.90.1399' to execute extended stored procedure 'xp_instance_regread'. This is an informational message only; no user action is required.
2007-01-03 13:09:24.68 Logon Error: 18456, Severity: 14, State: 8.
2007-01-03 13:09:24.68 Logon Login failed for user 'Greg'. [CLIENT: <local machine>]
2007-01-03 13:09:27.43 Logon Error: 18456, Severity: 14, State: 8.
2007-01-03 13:09:27.43 Logon Login failed for user 'Greg'. [CLIENT: <local machine>]


Again, thank you for any help. I think I may have been staring at this too long to be productive any more...
--Greg

View 3 Replies View Related

SQL 2012 :: Removing Service Accounts From Local Admin Group - File Permission Changes Needed

Feb 11, 2014

I setup SQL Server 2012 on Windows Server 2012 with the service accounts in the local Administrator group, but now that I'd like to remove the accounts from this group I'm finding they don't have the appropriate access to the network storage. notes on setting the per-service SID's for SQL (SQL Engine, Analysis Services, Reporting Services, and Agent Service) so they can read the Data, Log, and TempDB mount points?

View 2 Replies View Related

SQL Server Admin 2014 :: Does Security-admin Role Plus Deny Alter Any Login Cancel Each Other Out

Aug 27, 2015

I want to set up a database role so that users can use sp_readerrorlog through SSMS. It does a check on membership in the securityadmin role.

I have tested it and can see you can grant execute on xp_readerrorlog but the SSMS GUI uses sp_readerrorlog.

I thought I could create a user/certificate and add the signature to sp_readerrorlog but it's not permitted (likely because it's not a normal database object).

So the other solution is to add the users to the securityadmin role but then explicitly deny alter any login (best done with a custom server role in 2012+ but otherwise just manually in 2008). I tested this out and it works, I'm not able to alter any logins or increase my own permissions, I also did a check of what's reported from fn_my_permissions(null, null) and it shows minimal permissions like I'd expect.

View 0 Replies View Related

Local SQL Server Instances Not Showing Up On Local Servers Tab Of Management Studio Logon Screen

Oct 2, 2007

We have a 64-bit VM server running SQL Server 2005. The SQL Server on this particular VM server has 6 local instances installed. On the Management Studio logon screen I can type the full name of the local instance and connect to it, however if I press the drop down in the Server name field, choose Browse and select the Local Servers tab there is nothing listed under Database Engines.

Any idea why the 6 local instances don't show up under Database Engines? This is preventing me from installing a vendor application because their installer looks for local SQL Server instances on this server, but if SQL Server won't even show the local instances then the installer doesn't see them either.

Any help is greatly appreciated.

Thanks,
Craig

View 3 Replies View Related

Problem To Connect With SQL Server As Sysadmin

May 3, 2008

 Hi guys,When I am trying to connect with SQL server 2005 as SQL server authentication mode in my won machine as a sysadmin user then a error is ochered."Login failed for user 'sa'. The user is not associated with a trusted SQL Server connection. (Microsoft SQL Server, Error: 18452)". Please provide me a solution. 

View 2 Replies View Related

Is It Possible To Reconfigure The Sysadmin Server Role?

May 11, 2008

Hi all,

Is it possible to reconfigure the sysadmin server role?
How can I see it's permissions?
Thanks,
Assaf

View 1 Replies View Related

How To Grant Sysadmin Permission To SQL Server User ?

Jul 26, 2001

Hi,

I'm trying to run the Bulk Insert statement but in order for me the run it, i need to have the sysadmin permission. Can someone show me how to grant sysadmin permission to my SQL Server user? This is really urgent. Thank you in advance.

View 1 Replies View Related

Can't Read Tables If Not In Sysadmin Server Role

Jan 16, 2008



Listed below are some basic info about my application.


.net 2.0 web application

SQL 2000 database

Single sign-on. Windows Authentication with impersonate set to true in web.config:

<authentication mode="Windows"/>

<identity impersonate="true"/>

Connection String in web.config: <add name="conn" connectionString="Data Source=MyRemoteSeverName;Initial Catalog=MyDBName;Integrated Security=SSPI; " providerName="System.Data.SqlClient;"/>




The problem I'm having now is that any users that are not in the sysadmin server role can't read any table. Say if I have 2 users:

Domain1User1 ( in db_datareader and db_datawriter Database Role, no sever role assigned)
Domain1User2 ( in db_datareader and db_datawriter Database Role, sysadmin Server Role)

Here is what's expected to happen if everything goes well.


A list of customers ( first name, last name, age, etc) in a gridview should show up after login.

After both users logged in, Domain1User1 received an exception message of "Object reference not set to an instance of an object".

Domain1User2, however, was able to see the list.

I checked SQL Server Logs, and found 2 items:
Login succeeded for user 'Domain1User1' ... Connection TRUSTED
Login succeeded for user 'Domain1User2' ... Connection TRUSTED.
Based on the log file, it appears that both users had good connections to the database. Then why is it that User1, which is not in sysadmin Server Role, was not allowed to make a query?

Now if I assign sysadmin Server Role to Domain1User1 as well, the User1 will be able to see the list without seeing the exception.

Can someone shed some light for me please ?






View 5 Replies View Related

Not Able To Connect To The Local Database With (local) As Server Name

Jun 7, 2006

I am facing a problem in connecting to the local database with server name as (local).

I have installed SQL Server 2005 in my machine. When I try to connect to the SQL server with the server name as SUNILKUMAR I am able to connect but when I try to connect to the same server with the server name as (local) I am not able to connect. SUNILKUMAR is my machine name and SQL server is running locally.

if anyone can help me what is the problem in this case it is highly appriciated.

View 7 Replies View Related

'sysadmin Fixed Server Role' Error When Running A SQL Trace

Apr 20, 2006

Hi there. I work in a support department and on great occasion (such as this morning), I am RASd in to a client and try running a SQL trace, only to receive an error when setting it up, 'In order to run a trace against SQL Server you have to be amember of sysadmin fixed server role.'

Today, I even called their DBA and asked him if he could set our userid up with the proper permissions to all us to run traces (I'm debugging a RTE). He stated that he was unfamiliar with the error and didn't know where to assign us to resolve this problem.

Does anyone know how to resolve this?
Many thx.

View 1 Replies View Related

Transact SQL :: Server Trigger To Monitor Member Of Sysadmin Activities

Jul 22, 2015

I have to make server trigger to monitor the actitites if sysadmin members. i need to get the login name,hostname and query which they are running.

View 3 Replies View Related

Users Are Unable To Connect To SQL Server 2005 Unless They Are In The Sysadmin Group

Nov 21, 2006

We are running SQL Server 2005 in a Windows 2003 domain and I have a situation where some of my users are unable to connect to the SQL Server unless they are a member of the sysadmin group. Any attempts by these users to login result in a login failed,

Error: 18456, Severity: 14, State: 11

Which indicates that it is a valid user who does not have access to this SQL Server.

I have been able to narrow the failures down to the following situation:

Create a user, TestUser1, as a member of 1 domain local group TestGroup1

Give TestGroup1 access to SQL (standard public access to master)

All good. Login succeeds.

Add TestUser1 to another domain local group TestGroup2

Attempt to login to SQL Server -> login failed.

Add the user explicitly -> login failed

Add one of the groups to sysadmin -> login succeeds

It seems that as long as the user is a member of more than one AD group, and none of those groups is a member of the sysadmin server role then the user is unable to login. Obviously having all of the users as sysadmin isn't a workable solution, has anyone seen this issue before?

I have been able to replicate a similar situation in our test domain, but in that case the issue is resolved by adding the users explicitly to SQL Server (still not an ideal solution).

Interestingly, if I run the same test in our test domain but use global groups, it works. But unfortunately the network admin tells me the groups must stay as local.

Any help would be greatly appreciated.

Regards,

Daniel Watkins

View 13 Replies View Related

Is Local Admin Required For C# Express/SQL Express?

Mar 10, 2007

I have been trying to get Visual Studio Express w/C# to work with SQL Express. If I run with my normal local privs set to Debug User, I get a Login Failed message when I try to add a SQL database using the Add Item feature from the Solution Explorer. If I set my account to run as local administrator, everything works as expected. I am unable to connect to anything from the Database Explorer as well unless I am local admin.

I can run the SQL Express management utilities with no trouble when logged in as Debug User, and everything else in Visual Studio seems to work OK as well.

Is there a cure for this? I keep preaching to my users about the dangers of running as local admin, so I would feel uneasy about doing so myself just to be able to use VS Express.

View 9 Replies View Related

Snaphot Fails Unless Sysadmin Fixed Server Role Permission Granted

Jan 16, 2007

Edition: SQL Server 2005 Standard
I am trying to take a snapshot of a database for use in a publication. The account under which the snapshot agent is running is set to have the db_owner role for the database and have write access to the snapshot share.

I can not get the snapshot to run unless the account under which the snapshot agent is running is granted the sysadmin fixed server role. Because of the security implications of this, I don't want to grant these permissions.

As far as I am concerned, the minimum requirements for the snapshot account have been met and I have tried every other alternate that I can think of. I've checked MSDN and the newsgroups but I still have not solved the problem.

The error that I get when I run the snapshot.exe from the command line is:
The remote server "TURING" does not exist, or has not been designated as a valid Publisher, or you may not have permission to see available Publishers.

This error message has now inexplicably changed to:
You do not have sufficient permissions to run the command...

Any ideas? Thanks.

View 3 Replies View Related

Only Members Of The Sysadmin And Bulkadmin Fixed Server Roles Can Execute BULK INSERT

Aug 29, 2007

We would like to use the bulk insert function to import large CSV files into a SSE database however we have serious concerns regarding giving all our users these high privleges. Is there some way around this can we give them the privleges temporarily do the insert and take it away again or some other solution.

View 5 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved