Our MS SQL Server is on another trusted domain (Trusted Domain C). We created a Universal Group within Domain A with users from different forest domains and added the AD group onto the SQL Server. When the user from Child Domain B tries to connect, they get the error: "Login failed for user".

If I add the user directly instead of the AD Group in SQL Server, they can login without problems. Furthermore, if I create a AD group in Child Domain B, include all the users from that domain and add it to SQL Server, they have access.

Domain Forrest

  • Domain A
    • Child Domain B
  • Trusted Domain C

I'm on SQL Server 2016 (13.0.4001.0)

SQL Server error logs displays the error for that particular user: Reason: Could not find a login matching the name provided.

  • is there any additional details for "Login failed for user" error ? do Event Log (Application) or SQL Server Error log show reason why login failed ? – Aleksey Vitsko Oct 14 '20 at 15:01
  • You'll find the exact reason of "login failed" in SQL Server errorlog – sepupic Oct 14 '20 at 15:13
  • SQL Server error log displayed the following: Reason: Could not find a login matching the name provided. – Rick Oct 14 '20 at 15:40
  • We created a new AD Group within Chuld Domain B and added the users from that domain and added the group to SQL Server and it worked. So the problem is domain cross referencing in SQL Server. – Rick Oct 14 '20 at 15:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.