Questions tagged [active-directory]
Active Directory is a special-purpose database which stores network, user and printer data in a hierarchical, replicated, and extensible form.
122
questions
0
votes
1answer
72 views
+50
SQL Server 2000\2005 compatibility with Active Directory 2016
We are currently using Active Directory 2008R2 and will be upgrading to AD 2016. I'm trying to determine if there is any known compatibility issues when running older versions of SQL Server (2000 and ...
1
vote
1answer
32 views
With SSMS on my local machine, is it possible to login to a remote SQL server on my VPN network via my Active Directory credentials?
I'm trying to login to a SQL server on my work network with a VPN connection to the network and by using my AD credentials.
When I'm directly on my office machine, I use "Windows Authentication" as ...
0
votes
0answers
20 views
Login MSSQL using Active Directory account from local Windows account [duplicate]
Due to Coronavirus, we on my company are working from home. I had setup a virtual machine and am using VPN to connect to company's intranet.
It happens that we use company's AD account to log in ...
0
votes
1answer
490 views
Windows Cluster can't update DNS record
Setup:
Windows server 2016 standard edition.
SQL server 2016 standard edition.
2 nodes configured in a cluster without witness quorum.
all member of the same Active Directory domain.
1 Availability ...
0
votes
0answers
49 views
CreatingDC not updating after Domain controller Migration
Recently we have switched our domain controller and during the migration I have noticed on the cluster manager the below error
Cluster network name resource 'Cluster Name' encountered an error ...
1
vote
0answers
24 views
Default Schema not being applied even after setting default schema and default DB
Hello Stack Exchange!
I have an interesting problem! Let me set the stage for you:
1) Windows Authentication
2) Default Schema identityiq has been set for the user with login XCORP\USERA
3) ...
1
vote
1answer
303 views
Linux sqlcmd connecting to Windows Sql Server using kerberos
I'm pretty sure I am going to have to expand upon this a bit as I am new, and my question is probably not clear.
I have an Active Directory environment that includes a Microsoft SQL Server running ...
4
votes
1answer
119 views
Refresh SQL Server's service account security group membership
Consider a SQL Server whose service account is a Managed Service Account in Active Directory. When this MSA is added to a security group, this group membership is not immediately going to take effect ...
1
vote
2answers
643 views
Invoke-SQLCMD with special characters
I'm currently working on a project integrating AD with SQL Server data, which I am
handling mainly via powershell (Invoke-SQLCMD in particular). The issue I'm running into is if someone has a special ...
0
votes
1answer
89 views
Add a DL as a login in azure sql managed instace
I am able to add individual AD logins as a login in azure sql managed instance, when i try to add a DL is the same way i am getting the following error.
error: Principal '' could not be found or this ...
0
votes
0answers
21 views
Azure Sql database AAD user not getting created
I need to create an AAD user for a Windows security group that was recently synchronised with Azure AD. This security group has spaces in its name.
I am using the below SQL script but it keeps ...
1
vote
0answers
19 views
Oracle 12c - Installing SW with an Active Directory Account on RHEL7
My client insists on installing Oracle using an Active Directory Account as the SW owner instead of creating a local oracle service account on RHEL7.
I'm opposed, but willing to be flexible to meet ...
0
votes
0answers
50 views
SSMS cannot determine if remote computer is connected to domain
I've recently set up a new server with an SQL instance running on it (2017), I am able to connect to the server remotely using SSMS, but when I try to add a new login, I receive the attached error. ...
0
votes
0answers
59 views
mssql + sssd Ubuntu cannot login via AD group
I've got mssql 14.0.3192.2-2 setup unter Ubuntu; I have joined my machine to AD as described here.
The Windows login via SSMS and sqlcmd works if I add invididual AD users, but not if I add groups.
...
0
votes
1answer
75 views
Implementing gMSA account for SQL FCI
I have a question on implementing gMSA account for managing authentication to SQL server.
Our goal is to use gMSA account to manage the auto password change activities for SQl server service and it's ...
2
votes
1answer
241 views
Msg 15404, Level 16, State 10, Procedure xp_logininfo - missing permissions [duplicate]
I have a server based in the USA, where I am not a domain admin, and my permissions are limited to sql server only - where I am sysadmin.
after a migration of a few databases to a new server, I ...
4
votes
4answers
4k views
The Target Principal Name Is Incorrect. Cannot Generate SSPI Context (SQL or AD Issue)?
We had a power outage last night and when the server came back up our domain users could not access our SQL Server 2000 instance name: MASSQL.
We can access using SQL Authentication.
We tried making ...
1
vote
0answers
171 views
SSRS Azure SQL Database Active Directory - Universal with MFA
Does anyone know when support for Active Directory - Universal with MFA will be included in Reporting Services?
It's available in SSMS.
Visual Studio 2017 Data Source Properties
Reporting Server ...
3
votes
2answers
472 views
CREATE ASSEMBLY System.DirectoryServices.AccountManagement.dll without enabling TRUSTWORTHY
First, this is for SQL Server 2016. If I was on 2017+, I would be using sp_add_trusted_assembly. Just wanted to clarify that before asking the question.
How do you register the assembly System....
0
votes
1answer
538 views
“Active Directory - Password” login in SSMS for Azure AD - Password expired
I'm trying to connect to an Azure SQL DB through SSMS (v17.9.1), using an Azure AD user, that is an Active Directory Admin for my SQL Server that hosts my Azure SQL Database.
I'm able to login with ...
1
vote
0answers
775 views
Grant permissions over linked server
I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
1
vote
3answers
1k views
NTLM vs Kerberos authentication - questions
We have 4 servers, all are members of the same Domain:
1. SQL 2012 on Windows Server 2016
2. SQL 2012 on Windows Server 2012
3. SQL 2017 on Windows Server 2016
4. SQL 2017 on Windows Server 2016
I ...
0
votes
1answer
42 views
Concern on Active Directory Users on Azure SQL Server
I was able to add Azure Active Directory Users to Azure Sql server. My question is not related in including or removing an Azure AD user, but its existence after the user ceases himself/herself.
My ...
1
vote
1answer
40 views
SQL Server 11.0 and AD Groups
I have a user that has his Active Directory logon set to allow logging into a specific SQL Server, and that works fine. This user is also part of an AD Group that has access to a specific database on ...
1
vote
0answers
207 views
SQL Server in Azure VM + Azure AD + SSIS - how to authenticate?
Our configuration:
Windows Server 2016 VM in Azure, running SQL Server (same as on-prem version)
Azure Active Directory with users etc.
Local Windows 10 PCs are joined to the AAD domain
SQL Server ...
1
vote
1answer
55 views
Microsoft SQL Server v13 bulk add users from active directory
I would like to import all users from Active Directory into Security/Users.
What I do is the following:
Go to Security -> Users
Right click Users -> New User...
User type: Windows user, click on '......
5
votes
1answer
767 views
Service Principal as SQL Active Directory Admin, does it use Graph API?
I'm looking to use a service principal as the server admin, so it can be used in a release pipeline to create further active directory users.
I'm successfully able to make the service principal the ...
1
vote
0answers
27 views
Extracting AD subgroups information [duplicate]
I need to extract AD groups and all of it's subgroup into an excel sheet.Basically the script should loop though each of the AD group and get their subgroup.
AD_Group Subgroup
---------- -----...
2
votes
2answers
2k views
Active Directory not working through SQL server Management studio
I have created a Group in SQL Server and add an Active Directory group to it with which contains users.
When I try to login through Windows authentication, it gives me the following error:
Login ...
2
votes
0answers
170 views
Just one Active Directory group will not sync to SQL Server
Modifying the Active Directory group membership for a particular user propagates to our SQL Server instances as expected — except when one specific group is added. What is causing this issue, ...
-1
votes
2answers
6k views
How to login to SQL Server using AD user
I created an AD user through Administration tool
then performed following commands:
-- Add AD user EX. thu1 to database master
USE [master]
GO
CREATE LOGIN [QALAB\ABC1] FROM WINDOWS WITH ...
2
votes
0answers
13 views
Is it possible to join servers that are already in a database mirroring session into an Active Directory domain?
We have created a SQL Server database mirroring session on two workgroup servers(not in any domain). Now we are asked to join those two servers into a domain. Is this possible without rebuild the ...
0
votes
3answers
6k views
Why use domain account for SQL Server service?
I'd like to know the pros and cons of using domain accounts vs using local accounts.
Any help will be appreciated.
3
votes
1answer
840 views
Can't deploy SSIS package - The certificate chain was issued by an authority that is not trusted
I have an Azure Windows Server in a managed Domain (AD Domain Services) running SQL Server Enterprise.
I am trying to simply deploy a local (laptop) SSIS project to the remote SSIS server. When the ...
1
vote
0answers
676 views
LDAP Authentication - SQL Server 2017 on Linux
We have installed SQL Server 2017 on Linux server. I am able to connect SQL Server locally as well remotely but with local user access.
I have my AD account created and have AD server information. ...
3
votes
1answer
1k views
set Windows authentication for postgres
I'm trying to set Windows authentication for a postgres server.
The process is not well documented and makes the whole thing, obscure.
I found this doc but it is quite unclear.
In the necessary ...
0
votes
1answer
302 views
Single Domain Controller for SQL Server Always On Availability Group
I was wondering if SQL Server Always On Availability Group supports a single Domain Controller server as opposed to 2 Domain Controllers in every example I've seen. I ask because I suspect that this ...
7
votes
1answer
3k views
Query External LDAP Server from SQL Server
I have done extensive research on querying LDAP Server but so far has not been able to work around. Therefore, asking experts help
Background: I have a client whose LDAP Server is OnPremise (though ...
1
vote
1answer
2k views
Windows Authentication for SQL Server Linked Servers
Currently, on our project, we have a situation: there are a SQL Server 2012 instance IA in domain A and MS SQL Server 2012 instance IB in domain B. Domains A and B are trusted. IB configured as the ...
0
votes
1answer
4k views
Oracle Database authentication through Active Directory
We have Oracle 11g database running on a RHEL 6 server.
and we have a Active Directory domain running on windows 2008 server in same network.
I want to authenticate Oracle database users using this ...
1
vote
1answer
37 views
Autorise computer accounts through AD group
I would like to grant SQL access for computer accounts.
It works if I declare a login for each account, like CREATE LOGIN [contoso.com\srv1$] FROM WINDOWS
but I can't make it works when using a AD ...
0
votes
1answer
51 views
Communication between DB servers outside Active Directory
Dear SQL Server / Windows PROs:
I am trying to set up a solution here (based on SQL Server 2012 Std + Windows Server 2012 R2).
Currently the setup is based on a Cluster (two servers, 1 SAN) and stand ...
3
votes
1answer
4k views
Unable to connect using Azure AD Service Principal on SQL Server
I'm having trouble testing a connection to Azure SQL Server using SSMS with an active directory service principal.
I have an AD Admin account created, and have successfully added a colleague's AD ...
1
vote
1answer
202 views
troubleshooting login failure when AD group seems to be fine
I am using the procedure xp_logininfo to find out what groups a user belongs to.
I have created an AD group called SQLDBA, and added myself to it,
then created a login and granted sysadmin to the ...
3
votes
2answers
626 views
What are points to consider when replacing the SQL Server service account?
In What are the implications of changing the SQL Server Service Logon Account? it mentions that when replacing the SQL Server service account, the service will need to be restarted.
But there is more ...
1
vote
0answers
613 views
Occasional Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error
I know that this issue has been discussed elsewhere and I already read it. Our problem is that this occurs only once a day (roughly), the rest of time everything works fine.
SERVER RS
Windows Server ...
4
votes
4answers
3k views
See who has access to databases via AD group membership
SharePoint has a button to "Check Permissions". Here you can select a user from Active Directory, and it will magically traverse groups and show you all the access the user has on the site based on ...
0
votes
1answer
70 views
Row-based Permission in SQL Server Newbie Question
I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
0
votes
0answers
32 views
AD Service Account Changes
Are there any ways that can seamlessly enable the operational continuity of the Application upon a Service Account Password Change at Active Directory Level?
Any Ways?
Any Tools?
1
vote
1answer
139 views
Using Mixed mode authentication to authenticate Active Directory users to an application
I have a vendor supplied application that I have very limited access to change. The application controls a machine, and cannot easily be logged off between users (expect up to 5 user changes per hour)...
