Urgent - Windows AD users disable the db access? - SQL Server Forums

Home | Weblogs | Forums

Site Sponsored By: SQLDSC - SQL Server Desired State Configuration

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

SQL Server 2005 Forums

Transact-SQL (2005)

Urgent - Windows AD users disable the db access?

Author

Topic

confident119
Starting Member

12 Posts

Posted - 2009-06-03 : 08:46:59

Hi,

At this moment, all the users of Windows AD user accounts (assinged under adminstrator groups) able to access all the databases in sql server 2005.

Now we want to disable the some of user accounts to db access? how can i restrict it? Appreciate your reply asap..

Thanks

ArnoSmulders
Starting Member

3 Posts

Posted - 2009-06-03 : 09:23:33

I'm not sure if I understand your question correctly, but if you are using SQL Sever Management Studio, you can create and remove users from the Object Explorer.
Just go to your database, click Security | Users and select the user you want. Just delete that user and he can't access your database anymore.
A more subtle way would be to change the user's permissions. Select the user and click properties. Unmark all "owned schemas" and "role members" and if I'm not mistaken, that users will also be unable to access the database.

Arno

jholovacs
Posting Yak Master

163 Posts

Posted - 2009-06-03 : 09:29:41

it sounds like you have some NT groups assigned to roles in the database, You'll need to remove or modify them. If any NT users have admin access to the server, they likely have sa access to the SQL Server.

SELECT TOP 1
w.[name]
FROM
dbo.women w
INNER JOIN
dbo.inlaws i
ON
i.inlaw_id = w.parent_id
WHERE
i.net_worth > 10000000
AND
i.status IN ('dead', 'dying')
AND
w.husband_id IS NULL
ORDER BY
w.hotness_factor DESC

Subscribe to SQLTeam.com

SQLTeam.com Articles via RSS

SQLTeam.com Weblog via RSS

- Advertisement -

Resources