Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
Author |
Topic |
sqlteamhoush
Starting Member
8 Posts |
Posted - 2009-08-24 : 02:08:55
|
hello,I'm reading in the installation section on MS SQL Serv. 2005 that "MS recommends the use of Windows Authentication for user validation whenever possible"But how do I give the User appropriate rights Write/Read/Modify etc. for the DB if it's a windows account? With which tool do I assign the rights for the DB?thx alot,harald |
|
russell
Pyro-ma-ni-yak
5072 Posts |
Posted - 2009-08-24 : 10:47:45
|
exact same tools as if you use SQL authentication. |
 |
|
sqlteamhoush
Starting Member
8 Posts |
Posted - 2009-08-24 : 15:47:11
|
could I please get a little more info on that? |
 |
|
russell
Pyro-ma-ni-yak
5072 Posts |
Posted - 2009-08-24 : 23:27:21
|
If you're using Management Studio (sqlwb.exe)Expand security nodeRight click Logins, click New LoginTick Windows AuthenticationClick Search buttonClick LocationsClick Entire NetworkType user name in the text area (real name or windows name)Click Check Names Button. System will find appropriate user.Click OKNow go to User MappingTick the database(s) you want the user to have access toAssign roles as desired |
 |
|
sqlteamhoush
Starting Member
8 Posts |
Posted - 2009-08-25 : 08:50:47
|
hello russell,thank you very much!What I cannot yet figure out is how to deal with the accounts if we change the underlying OS one day. So if we change from windows 2003 Server (today) to some windows X server one day how do we deal with all the users which were created on the windows 2003 machine? |
 |
|
russell
Pyro-ma-ni-yak
5072 Posts |
Posted - 2009-08-25 : 09:42:40
|
Do you use Active Directory? If so, the logins you create should be domain users, not local machine users. |
 |
|
sqlteamhoush
Starting Member
8 Posts |
Posted - 2009-08-25 : 11:02:32
|
No we don't use active dir.We have a eDirectory (Novel) but I don't know if we can use that!? It would be ideal if we could use eDirectory.If we cannot use eDir, is the only option to use internal DB account?thx |
 |
|
|
|
|