Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
Author |
Topic |
DBADave
Constraint Violating Yak Guru
366 Posts |
Posted - 2007-02-28 : 13:05:45
|
I'm looking for ways to simplify our disaster recovery process and am curious how everyone handles recreating local users and local groups? For past tests I've manually added any local users, local groups and local group members. The problem with this approach is how to keep track of changes made in production and make sure these changes are well documented so they can be recreated at the DR site. Is there a way to backup this information or must it be keyed in manually?Thanks, Dave |
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2007-02-28 : 13:15:58
|
Local users and local group? Why aren't you using Domain users and domain groups and then adding those directly to SQL Server?Tara Kizer |
 |
|
DBADave
Constraint Violating Yak Guru
366 Posts |
Posted - 2007-02-28 : 13:32:35
|
We have over 50 production SQL Servers and most support third-party applications. Some applications require the use of local groups, but even for the ones that don't we still restrict access to the server by only adding certain domain groups to the local adminstrators group or user group for example. We also have situations with SQL 2005 where SSIS-related permissions need to be set at the folder level on a server. Those permissions are maintained at the local group level with domain groups added to the local group. Dave |
 |
|
mcrowley
Aged Yak Warrior
771 Posts |
Posted - 2007-02-28 : 14:54:39
|
When you restore the master database, all of the logins should have the correct SIDs to match up with the user databases. If all permissions are granted to groups within the database, then the users only get their permissions from those groups, you just restore master, then restore the database, and walk away. |
 |
|
DBADave
Constraint Violating Yak Guru
366 Posts |
Posted - 2007-02-28 : 15:52:59
|
I'm referring to the local users and groups on the physical server, not the SQL server users and groups.Dave |
 |
|
|
|
|