Author |
Topic |
ahouse
Starting Member
27 Posts |
Posted - 2008-01-18 : 16:53:05
|
Good Afternoon,I have created an Accounting usergroup using the Windows NT Authentication a couple weeks ago. There are 5 members in this group. In my SQL Enterprise Manager, I have added this group as a user and given them SELECT permissions on eight tables in my database. For the second time in 2 weeks, these permissions have mysteriously vanished from the list. All of my other user groups show the correct permissions but for some reason this one "resets" itself or something. Has anyone ever heard of this happening or have a clue as to why? I can't think of anything security-related that would just do this out of the blue. Thanks everyone,Andrew |
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-01-20 : 00:02:54
|
Didn't have that ob my servers. What's sql sp level? |
 |
|
ahouse
Starting Member
27 Posts |
Posted - 2008-01-21 : 09:31:52
|
quote: Originally posted by rmiao Didn't have that ob my servers. What's sql sp level?
It is Enterprise Manager 8.0. and SQL sp 4. Maybe I didn't explain that well enough. When I expand my database in enterprise manager, you can select Diagrams, Tables, Views, Stored Procedures, Users, Roles etc... I am in the Users directory (permissions) and in there I added a user called Accounting. Accounting is a group I created containing some users. From there, I went to the properties and then Permissions. Then added select access to 8 tables that they need access to. A couple days later, their access was being denied so I went in to check the permissions and all of the check boxes I had selected were no longer checked. I hope this clarifies it a little bit? Was just curious what could be causing this. Thanks everyone!Andrew |
 |
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-01-21 : 16:19:03
|
Restored db from backup took before? |
 |
|
ahouse
Starting Member
27 Posts |
Posted - 2008-01-21 : 16:53:00
|
quote: Originally posted by rmiao Restored db from backup took before?
I haven't done any backups or restores. It just simply erased the list of permissions available for that group. |
 |
|
tripodal
Constraint Violating Yak Guru
259 Posts |
Posted - 2008-01-21 : 17:09:46
|
Have you rechecked the DNS settings of the SQL Server. In any domain DNS for all devices should resolve to the DNS domain, and not an external server. |
 |
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-01-21 : 18:17:45
|
DNS is nothing to do with sql permission.ahouse, you may need to trace that in profiler to find out what's going on. |
 |
|
tripodal
Constraint Violating Yak Guru
259 Posts |
Posted - 2008-01-23 : 15:46:59
|
DNS has nothing to do with SQL Authentication.Windows authentication Depends on DNS and Active Directory.quote: Originally posted by ahouseI have created an Accounting usergroup using the Windows NT Authentication a couple weeks ago. There are 5 members in this group.
NT Authentication is handled by Active Directory on the Domain Controller. If DNS is not working properly you will have issies.The paragraph labeled "Authentication" explains this.http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sqlops3.mspx#EZD |
 |
|
ahouse
Starting Member
27 Posts |
Posted - 2008-01-23 : 16:40:39
|
quote: Originally posted by tripodal DNS has nothing to do with SQL Authentication.Windows authentication Depends on DNS and Active Directory.quote: Originally posted by ahouseI have created an Accounting usergroup using the Windows NT Authentication a couple weeks ago. There are 5 members in this group.
NT Authentication is handled by Active Directory on the Domain Controller. If DNS is not working properly you will have issies.The paragraph labeled "Authentication" explains this.http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sqlops3.mspx#EZD
Thank you for the response Tripodal. This makes the most sense. I was just making sure it wasn't a SQL issue before I started checking my Server 2003 Active Directory settings. Thanks for the feedback everyone |
 |
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-01-23 : 23:05:07
|
If it's domain controller issue, you'll get error while connect to sql with windows authentication. Once added windows account as sql login and assigned db permission, only time sql checks account in domain cotroller is during sql logon process. |
 |
|
|