Questions tagged [active-directory]

Active Directory is a special-purpose database which stores network, user and printer data in a hierarchical, replicated, and extensible form.

Filter by
Sorted by
Tagged with
3 votes
1 answer
64 views

Users time out (or it's very slow) authenticating to SQL Server, but RDP authenticates immediately

The authentication timeouts and slowness happen for both local SQL logins and Windows authentication using AD. Rebooting "masks" the problem for a while, but after 6-8 hours, we see them ...
user avatar
  • 455
0 votes
0 answers
37 views

IIS web application access SQL DB as service account

I've setup a new Python site on iis using FastCGI handler. The site has windows authentication enabled in iis and the app checks that the AD user belongs to an active directory group when they access ...
user avatar
  • 101
1 vote
2 answers
76 views

How can one authenticate with AzAD while using Read-SqlTableData to read AzSQL tables

How should one specify the User ID while creating the $sqlcc object when using Read-SqlTableData to read a table in AzSQL with an Azure account? $sqlcc = new-object ('System.Data.SqlClient....
user avatar
0 votes
1 answer
45 views

AD group added to SQL as sysadmin not allowing users to login who are part of the group

So I am helping with some work and we have built a few servers in Azure with their SQL server image. Everything seems healthy apart from when adding an AD group for the domain admins to access SQL i ...
user avatar
0 votes
1 answer
109 views

Why does xp_logininfo shows less members for an AD group?

This question might be stupid, but it has been confusing me for a while... First, I used xp_logininfo 'groupA', 'members' to show members of GroupA, as a result, member1 and member2 are listed, but ...
user avatar
  • 23
1 vote
1 answer
67 views

What elements of sql server are impacted due to removal of domain/AD?

Sql server contains logins from 3 different domains (Under security\logins). These are mapped to database users. There are 15 databases. One of the domain/AD is planned to be decommissioned next year. ...
user avatar
  • 2,158
0 votes
3 answers
180 views

Are there any big security risks for opening ports 1433 and 1434 to VPN Only? [closed]

So my organization is using VPN and Remote Desktop (RDP) for telecommuting. Due to some internal issues it has been requested of our Network staff to open ports 1433 and 1434 (SQL Server ports) to VPN ...
user avatar
  • 3
0 votes
0 answers
375 views

Kerberos - configure constrained delegation using SQL Server's virtual accounts

I'm trying to setup Kerberos constrained delegation to solve my double hop problem. I'm using standard SQL Server configuration with Virtual Account (NT SERVICE\MSSQLSERVER) as a service account for ...
user avatar
  • 141
1 vote
2 answers
463 views

SQL Server 2019 - using MSA as a proxy account

I'm thinking about using MSA (or gMSA) as proxies inside my SQL Server instances. This proxies would be used for example for running SSIS packages or xp_cmdshell command. But based on what I've ...
user avatar
  • 141
0 votes
1 answer
265 views

SQL Server - managing Linked Servers with domain authentication

We are small IT department and we are changing how our infrastructure works. We are trying to make it more secure, manageable and transparent for auditing. We are implementing a domain for our servers ...
user avatar
  • 141
0 votes
1 answer
80 views

How do I give my non-Azure app access to Azure SQL Server without whitelisting an ip address?

I have an app that is deployed to Vercel. It is registered in Azure AD and uses AAD for authentication. I added my personal ip to the whitelist, and when I run it locally, everything works as it ...
user avatar
2 votes
0 answers
52 views

SQL Server - Holistic approach to managing permissions from a domain [closed]

We are small IT department and we are changing how our infrastructure works. We are trying to make it more secure, manageable and transparent for auditing. We are implementing a domain for our servers ...
user avatar
  • 141
0 votes
0 answers
27 views

Domain configuration to allow Agent service account to create folders on remote host

I have a lab created with DC and two other Windows servers. One of them is Primary Server in LogShipping configuration and the other one is Secondary Server. Both SQL instances run under the same ...
user avatar
0 votes
1 answer
352 views

Granting SSIS permissions - how to use roles and proxies [closed]

I'm new to a SSIS workflow and I'm trying to understand how should I go about grating permissions. There are many different database-level roles for SSIS, there is SQL Server Agent involved or Proxies....
user avatar
  • 141
1 vote
0 answers
20 views

"Friendly" role name since Azure PostgreSQL connection via AD security group role requires the AD group name as the username@pgservername?

With PostgreSQL's use of the rolename@pgservername and AD auth requiring the security group name as the role name, any user connecting via AD must know their AD security group name. I'd like to user ...
user avatar
0 votes
1 answer
58 views

Azure PostgreSQL Active Directory Admin - works as my AD user but not as an AD group I'm in

I have an Azure PostgreSQL server that is giving different connection results in Azure Data Studio (with the PG extension) depending on how the resource's AD Admin setting is configured. With the AD ...
user avatar
0 votes
0 answers
21 views

Authenticating Postgresql users with Active Directory

Following this procedure, I've arrived at the step: (if you do not have a ticket already, run: kinit sfrost@DOMAIN.LOCAL) But when I do that... $ hostname blarg $ kinit -V ron@EXAMPLE.COM Using ...
user avatar
  • 455
0 votes
0 answers
44 views

AAD users lose access to database after import

I googled for the last few days but I got a bit confused and I do not know how to proceed further. Also, I'm not a DBA and I was just faced with this situation for the first time. Using sqlpackage.exe ...
user avatar
0 votes
1 answer
51 views

Could I control which protocol will ODBC uses to connect MSSQL on "integrated windows authentication"

I have a Windows machine that should connect to an MSSQL instance with an ODBC driver using "windows integrated authentication". Now according to the specifications of the login message the ...
user avatar
1 vote
0 answers
332 views

Could not obtain information about Windows NT group/user, error code 0x6ba

When I run EXEC master.dbo.xp_logininfo [DOMAIN_B\GroupName],'members' I am getting an error: Could not obtain information about Windows NT group/user 'DOMAIN_B\GroupName ', error code 0x6ba. The ...
user avatar
  • 935
0 votes
1 answer
319 views

Postgres 13 - Grant to Active Directory Groups?

Is it possible to grant an AD group in PG 13 without sorting to creating the group in the database? Similar to how AD groups can be granted directly in SQL Server. The PG server is on a Windows server ...
user avatar
  • 301
1 vote
1 answer
653 views

Nested AD group access not working when nested more than 2 levels deep?

For the setup of the security of the databases we have created a number of nested Active Directory groups: Group Members Group type RGP-EA_PROD-RW RGP-SparxEA-RW Domain Local Security RGP-SparxEA-...
user avatar
2 votes
1 answer
374 views

Adding AD Security group to a SQL linked server

I have a question about adding permissions for a user group on a linked server in SQL Server. I am not a security specialist, so I appeal to everyone. Here is the topo: I have private software that I'...
user avatar
0 votes
1 answer
188 views

Issues deploying SSIS package to SQL Server in Azure AD Domain Services (AADDS) environment

We use Azure Active Directory (Azure AD) in my organisation, and we recently deployed Azure AD Domain Services AADDS) to handle a SQL Server 2019 we use internally. My Azure AD domain is (fictitiously)...
user avatar
  • 681
0 votes
1 answer
616 views

Active Directory authentication with SQL Server on Linux containers

I have a problem and hope someone can help me. I have SQL Server as docker container. I want our developers able to login in SSMS (SQL Server Management Studio) using their Active Directory users. I ...
user avatar
0 votes
0 answers
64 views

Login oracle database with Microsoft Active Directory error

I have two machines, one (let's call it dbmachine) has the database and client installed of oracle 11g release 2, the other one is the domain controller (let's call it dcmachine) and has the client ...
user avatar
  • 101
0 votes
1 answer
184 views

Querying AD from SQL Server

I've read tons of questions and answers about my error but none of them helped me ( from PINAL website, microsoft links and everything ). questions from 9 years ago to today. I created a Linked server ...
user avatar
  • 7,100
0 votes
1 answer
123 views

Linked Server to AD reporting error even with max permissions

I've created a linked server pointing our AD to create some reports. the query to retrive the info is this one: SELECT * FROM OpenQuery ( ADSI, 'SELECT mail ,mobile ,telephoneNumber ,...
user avatar
  • 7,100
6 votes
2 answers
723 views

Intermittent SQL Delegated Authentication Errors

Here is an odd issue that is causing me to lose all my hair. Every few days or so our delegated authentication from one SQL server to another fails with the error: Login failed for user 'NT AUTHORITY\...
user avatar
  • 61
0 votes
0 answers
237 views

Login to SQL Server cross domain AD Group user

Our MS SQL Server is on another trusted domain (Trusted Domain C). We created a Universal Group within Domain A with users from different forest domains and added the AD group onto the SQL Server. ...
user avatar
  • 207
1 vote
0 answers
160 views

SQL Login Denied yet Login is sysadmin

When I installed SQL Server 2017 Standard I installed it under my domain account and added it to the sysadmin role. I have then added the Domain Admins AD group to SQL and have deleted my domain ...
user avatar
  • 11
0 votes
1 answer
357 views

SQL Server Linked Server to Azure SQL using Azure AD

I am trying to set up a linked server from an on-prem SQL Server to an Azure SQL instance. The Azure SQL instance uses Azure AD for authentication. When we attempt the connection we get this error ...
user avatar
2 votes
1 answer
2k views

On-premesis SQL Server setup for MFA against Azure AD

I am trying to set up multi-factor authentication in SSMS using an on-premesis SQL Server (Standard Edition). I believe the SSMS is simple enough. Under the "Login" tab, I have chosen &...
user avatar
  • 45
1 vote
0 answers
289 views

Naming Convention for SQL AD Group Logins (Potential Bug)

My team is attempting to come up with a new naming standard for our Active Directory groups within SQL Server to help manage permissions. DOMAIN\ENVIRONMENT_DATABASE_FUNCTION EXAMPLES: TEST\...
user avatar
0 votes
1 answer
164 views

SQL Server 2000\2005 compatibility with Active Directory 2016

We are currently using Active Directory 2008R2 and will be upgrading to AD 2016. I'm trying to determine if there is any known compatibility issues when running older versions of SQL Server (2000 and ...
user avatar
  • 283
1 vote
1 answer
558 views

With SSMS on my local machine, is it possible to login to a remote SQL server on my VPN network via my Active Directory credentials?

I'm trying to login to a SQL server on my work network with a VPN connection to the network and by using my AD credentials. When I'm directly on my office machine, I use "Windows Authentication" as ...
user avatar
  • 24.2k
0 votes
0 answers
35 views

Login MSSQL using Active Directory account from local Windows account [duplicate]

Due to Coronavirus, we on my company are working from home. I had setup a virtual machine and am using VPN to connect to company's intranet. It happens that we use company's AD account to log in ...
user avatar
  • 1,413
1 vote
2 answers
20k views

Windows Cluster can't update DNS record

Setup: Windows server 2016 standard edition. SQL server 2016 standard edition. 2 nodes configured in a cluster without witness quorum. all member of the same Active Directory domain. 1 Availability ...
user avatar
0 votes
0 answers
338 views

CreatingDC not updating after Domain controller Migration

Recently we have switched our domain controller and during the migration I have noticed on the cluster manager the below error     Cluster network name resource 'Cluster Name' encountered an error ...
user avatar
  • 1,007
2 votes
0 answers
29 views

Default Schema not being applied even after setting default schema and default DB

Hello Stack Exchange! I have an interesting problem! Let me set the stage for you: 1) Windows Authentication 2) Default Schema identityiq has been set for the user with login XCORP\USERA 3) ...
user avatar
  • 121
2 votes
1 answer
2k views

Linux sqlcmd connecting to Windows Sql Server using kerberos

I'm pretty sure I am going to have to expand upon this a bit as I am new, and my question is probably not clear. I have an Active Directory environment that includes a Microsoft SQL Server running ...
user avatar
  • 121
4 votes
1 answer
376 views

Refresh SQL Server's service account security group membership

Consider a SQL Server whose service account is a Managed Service Account in Active Directory. When this MSA is added to a security group, this group membership is not immediately going to take effect ...
user avatar
  • 725
1 vote
2 answers
3k views

Invoke-SQLCMD with special characters

I'm currently working on a project integrating AD with SQL Server data, which I am handling mainly via powershell (Invoke-SQLCMD in particular). The issue I'm running into is if someone has a special ...
user avatar
  • 188
1 vote
1 answer
311 views

Add a DL as a login in azure sql managed instace

I am able to add individual AD logins as a login in azure sql managed instance, when i try to add a DL is the same way i am getting the following error. error: Principal '' could not be found or this ...
user avatar
  • 131
0 votes
0 answers
26 views

Azure Sql database AAD user not getting created

I need to create an AAD user for a Windows security group that was recently synchronised with Azure AD. This security group has spaces in its name. I am using the below SQL script but it keeps ...
user avatar
  • 77
1 vote
0 answers
20 views

Oracle 12c - Installing SW with an Active Directory Account on RHEL7

My client insists on installing Oracle using an Active Directory Account as the SW owner instead of creating a local oracle service account on RHEL7. I'm opposed, but willing to be flexible to meet ...
user avatar
  • 187
2 votes
1 answer
582 views

SSMS cannot determine if remote computer is connected to domain

I've recently set up a new server with an SQL instance running on it (2017), I am able to connect to the server remotely using SSMS, but when I try to add a new login, I receive the attached error. ...
user avatar
0 votes
0 answers
110 views

mssql + sssd Ubuntu cannot login via AD group

I've got mssql 14.0.3192.2-2 setup unter Ubuntu; I have joined my machine to AD as described here. The Windows login via SSMS and sqlcmd works if I add invididual AD users, but not if I add groups. ...
user avatar
  • 1
0 votes
1 answer
150 views

Implementing gMSA account for SQL FCI

I have a question on implementing gMSA account for managing authentication to SQL server. Our goal is to use gMSA account to manage the auto password change activities for SQl server service and it's ...
user avatar
  • 2,127
2 votes
1 answer
804 views

Msg 15404, Level 16, State 10, Procedure xp_logininfo - missing permissions [duplicate]

I have a server based in the USA, where I am not a domain admin, and my permissions are limited to sql server only - where I am sysadmin. after a migration of a few databases to a new server, I ...
user avatar