Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 Transact-SQL (2005)
 Logins are failing???

Author  Topic 

Vinnie881
Master Smack Fu Yak Hacker

1231 Posts

Posted - 2007-09-25 : 15:25:37
I have a Windows security Permission called ACCESS_DBPRODUCTION_ALLUSERS.

this security permission has access to my db's in sql that the users should have access to.

there are 5 members of that security group, all with IDENTIAL membership rights

ACCESS_DBPRODUCTION_ALLUSERS
and
DOMAINUSER


For some reason 1 of the 5 can not login to sql. They get rejected saying that COMPUTER/BOB does not have access to this database.

I have verified that they infact do have access, and that the do not show up anywhere under any of the SQL security settings as being blocked.

Does anyone know what I can do next to check?

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2007-09-25 : 15:27:42
COMPUTER\BOB indicates to me that he is trying to login with a workgroup account and not with a domain account. It should say DomainName\UserName otherwise.

Check the current credentials of that user on the machine where he is trying to access the database.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/
Go to Top of Page

Vinnie881
Master Smack Fu Yak Hacker

1231 Posts

Posted - 2007-09-25 : 15:40:47
It turns out the error was the workstation needed a restart...

Kind of a pain in the @ss, after 1 and 1/2 hours of trying to figure it out.

You would think after all this time of being a Network Admin that would be one of the first things to try!

Ugh, one of those days.

Ohh and Tara, you are correct it was a domain name, I just was trying to illustrate I was using a trusted connection, and typed it out wrong.
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2007-09-25 : 22:49:01
Sql server can't talk to domain controller, may need check domain browser service on the network.
Go to Top of Page
   

- Advertisement -