What is the best method to grant read access to all current and future databases to a user (AD Group in this case)?
Currently I have a flaky scheduled job that does this using (going to start debugging the following, but maybe I am doing it wrong anyways):
sp_msforeachdb ' USE [?] CREATE USER [MY_DOMAIN\SQL-READ-ALL] FOR LOGIN [MY_DOMAIN\SQL-READ-ALL] USE [?] EXEC sp_addrolemember N''db_datareader'', N''MY_DOMAIN\SQL-READ-ALL'' '
Perhaps there is a better way?