Questions tagged [active-directory]
Active Directory is a special-purpose database which stores network, user and printer data in a hierarchical, replicated, and extensible form.
156
questions
3
votes
1
answer
64
views
Users time out (or it's very slow) authenticating to SQL Server, but RDP authenticates immediately
The authentication timeouts and slowness happen for both local SQL logins and Windows authentication using AD. Rebooting "masks" the problem for a while, but after 6-8 hours, we see them ...
- 455
0
votes
0
answers
37
views
IIS web application access SQL DB as service account
I've setup a new Python site on iis using FastCGI handler. The site has windows authentication enabled in iis and the app checks that the AD user belongs to an active directory group when they access ...
- 101
1
vote
2
answers
76
views
How can one authenticate with AzAD while using Read-SqlTableData to read AzSQL tables
How should one specify the User ID while creating the $sqlcc object when using Read-SqlTableData to read a table in AzSQL with an Azure account?
$sqlcc = new-object ('System.Data.SqlClient....
- 115
0
votes
1
answer
45
views
AD group added to SQL as sysadmin not allowing users to login who are part of the group
So I am helping with some work and we have built a few servers in Azure with their SQL server image. Everything seems healthy apart from when adding an AD group for the domain admins to access SQL i ...
- 1
0
votes
1
answer
109
views
Why does xp_logininfo shows less members for an AD group?
This question might be stupid, but it has been confusing me for a while...
First, I used xp_logininfo 'groupA', 'members' to show members of GroupA, as a result, member1 and member2 are listed, but ...
- 23
1
vote
1
answer
67
views
What elements of sql server are impacted due to removal of domain/AD?
Sql server contains logins from 3 different domains (Under security\logins). These are mapped to database users. There are 15 databases.
One of the domain/AD is planned to be decommissioned next year.
...
- 2,158
0
votes
3
answers
180
views
Are there any big security risks for opening ports 1433 and 1434 to VPN Only? [closed]
So my organization is using VPN and Remote Desktop (RDP) for telecommuting. Due to some internal issues it has been requested of our Network staff to open ports 1433 and 1434 (SQL Server ports) to VPN ...
- 3
0
votes
0
answers
375
views
Kerberos - configure constrained delegation using SQL Server's virtual accounts
I'm trying to setup Kerberos constrained delegation to solve my double hop problem.
I'm using standard SQL Server configuration with Virtual Account (NT SERVICE\MSSQLSERVER) as a service account for ...
- 141
1
vote
2
answers
463
views
SQL Server 2019 - using MSA as a proxy account
I'm thinking about using MSA (or gMSA) as proxies inside my SQL Server instances. This proxies would be used for example for running SSIS packages or xp_cmdshell command.
But based on what I've ...
- 141
0
votes
1
answer
265
views
SQL Server - managing Linked Servers with domain authentication
We are small IT department and we are changing how our infrastructure works. We are trying to make it more secure, manageable and transparent for auditing.
We are implementing a domain for our servers ...
- 141
0
votes
1
answer
80
views
How do I give my non-Azure app access to Azure SQL Server without whitelisting an ip address?
I have an app that is deployed to Vercel. It is registered in Azure AD and uses AAD for authentication. I added my personal ip to the whitelist, and when I run it locally, everything works as it ...
- 629
2
votes
0
answers
52
views
SQL Server - Holistic approach to managing permissions from a domain [closed]
We are small IT department and we are changing how our infrastructure works. We are trying to make it more secure, manageable and transparent for auditing.
We are implementing a domain for our servers ...
- 141
0
votes
0
answers
27
views
Domain configuration to allow Agent service account to create folders on remote host
I have a lab created with DC and two other Windows servers. One of them is Primary Server in LogShipping configuration and the other one is Secondary Server. Both SQL instances run under the same ...
- 23
0
votes
1
answer
352
views
Granting SSIS permissions - how to use roles and proxies [closed]
I'm new to a SSIS workflow and I'm trying to understand how should I go about grating permissions.
There are many different database-level roles for SSIS, there is SQL Server Agent involved or Proxies....
- 141
1
vote
0
answers
20
views
"Friendly" role name since Azure PostgreSQL connection via AD security group role requires the AD group name as the username@pgservername?
With PostgreSQL's use of the rolename@pgservername and AD auth requiring the security group name as the role name, any user connecting via AD must know their AD security group name. I'd like to user ...
- 41
0
votes
1
answer
58
views
Azure PostgreSQL Active Directory Admin - works as my AD user but not as an AD group I'm in
I have an Azure PostgreSQL server that is giving different connection results in Azure Data Studio (with the PG extension) depending on how the resource's AD Admin setting is configured. With the AD ...
- 41
0
votes
0
answers
21
views
Authenticating Postgresql users with Active Directory
Following this procedure, I've arrived at the step:
(if you do not have a ticket already, run: kinit sfrost@DOMAIN.LOCAL)
But when I do that...
$ hostname
blarg
$ kinit -V ron@EXAMPLE.COM
Using ...
- 455
0
votes
0
answers
44
views
AAD users lose access to database after import
I googled for the last few days but I got a bit confused and I do not know how to proceed further. Also, I'm not a DBA and I was just faced with this situation for the first time.
Using sqlpackage.exe ...
0
votes
1
answer
51
views
Could I control which protocol will ODBC uses to connect MSSQL on "integrated windows authentication"
I have a Windows machine that should connect to an MSSQL instance with an ODBC driver using "windows integrated authentication".
Now according to the specifications of the login message the ...
- 125
1
vote
0
answers
332
views
Could not obtain information about Windows NT group/user, error code 0x6ba
When I run
EXEC master.dbo.xp_logininfo [DOMAIN_B\GroupName],'members'
I am getting an error:
Could not obtain information about Windows NT group/user 'DOMAIN_B\GroupName ', error code 0x6ba.
The ...
- 935
0
votes
1
answer
319
views
Postgres 13 - Grant to Active Directory Groups?
Is it possible to grant an AD group in PG 13 without sorting to creating the group in the database?
Similar to how AD groups can be granted directly in SQL Server.
The PG server is on a Windows server ...
- 301
1
vote
1
answer
653
views
Nested AD group access not working when nested more than 2 levels deep?
For the setup of the security of the databases we have created a number of nested Active Directory groups:
Group
Members
Group type
RGP-EA_PROD-RW
RGP-SparxEA-RW
Domain Local Security
RGP-SparxEA-...
2
votes
1
answer
374
views
Adding AD Security group to a SQL linked server
I have a question about adding permissions for a user group on a linked server in SQL Server. I am not a security specialist, so I appeal to everyone.
Here is the topo:
I have private software that I'...
- 55
0
votes
1
answer
188
views
Issues deploying SSIS package to SQL Server in Azure AD Domain Services (AADDS) environment
We use Azure Active Directory (Azure AD) in my organisation, and we recently deployed Azure AD Domain Services AADDS) to handle a SQL Server 2019 we use internally.
My Azure AD domain is (fictitiously)...
- 681
0
votes
1
answer
616
views
Active Directory authentication with SQL Server on Linux containers
I have a problem and hope someone can help me. I have SQL Server as docker container. I want our developers able to login in SSMS (SQL Server Management Studio) using their Active Directory users. I ...
0
votes
0
answers
64
views
Login oracle database with Microsoft Active Directory error
I have two machines, one (let's call it dbmachine) has the database and client installed of oracle 11g release 2, the other one is the domain controller (let's call it dcmachine) and has the client ...
- 101
0
votes
1
answer
184
views
Querying AD from SQL Server
I've read tons of questions and answers about my error but none of them helped me ( from PINAL website, microsoft links and everything ). questions from 9 years ago to today.
I created a Linked server ...
- 7,100
0
votes
1
answer
123
views
Linked Server to AD reporting error even with max permissions
I've created a linked server pointing our AD to create some reports.
the query to retrive the info is this one:
SELECT * FROM OpenQuery (
ADSI,
'SELECT
mail
,mobile
,telephoneNumber
,...
- 7,100
6
votes
2
answers
723
views
Intermittent SQL Delegated Authentication Errors
Here is an odd issue that is causing me to lose all my hair.
Every few days or so our delegated authentication from one SQL server to another fails with the error:
Login failed for user 'NT AUTHORITY\...
- 61
0
votes
0
answers
237
views
Login to SQL Server cross domain AD Group user
Our MS SQL Server is on another trusted domain (Trusted Domain C). We created a Universal Group within Domain A with users from different forest domains and added the AD group onto the SQL Server. ...
- 207
1
vote
0
answers
160
views
SQL Login Denied yet Login is sysadmin
When I installed SQL Server 2017 Standard I installed it under my domain account and added it to the sysadmin role. I have then added the Domain Admins AD group to SQL and have deleted my domain ...
- 11
0
votes
1
answer
357
views
SQL Server Linked Server to Azure SQL using Azure AD
I am trying to set up a linked server from an on-prem SQL Server to an Azure SQL instance. The Azure SQL instance uses Azure AD for authentication. When we attempt the connection we get this error
...
- 128
2
votes
1
answer
2k
views
On-premesis SQL Server setup for MFA against Azure AD
I am trying to set up multi-factor authentication in SSMS using an on-premesis SQL Server (Standard Edition). I believe the SSMS is simple enough. Under the "Login" tab, I have chosen &...
- 45
1
vote
0
answers
289
views
Naming Convention for SQL AD Group Logins (Potential Bug)
My team is attempting to come up with a new naming standard for our Active Directory groups within SQL Server to help manage permissions.
DOMAIN\ENVIRONMENT_DATABASE_FUNCTION
EXAMPLES:
TEST\...
- 81
0
votes
1
answer
164
views
SQL Server 2000\2005 compatibility with Active Directory 2016
We are currently using Active Directory 2008R2 and will be upgrading to AD 2016. I'm trying to determine if there is any known compatibility issues when running older versions of SQL Server (2000 and ...
- 283
1
vote
1
answer
558
views
With SSMS on my local machine, is it possible to login to a remote SQL server on my VPN network via my Active Directory credentials?
I'm trying to login to a SQL server on my work network with a VPN connection to the network and by using my AD credentials.
When I'm directly on my office machine, I use "Windows Authentication" as ...
- 24.2k
0
votes
0
answers
35
views
Login MSSQL using Active Directory account from local Windows account [duplicate]
Due to Coronavirus, we on my company are working from home. I had setup a virtual machine and am using VPN to connect to company's intranet.
It happens that we use company's AD account to log in ...
- 1,413
1
vote
2
answers
20k
views
Windows Cluster can't update DNS record
Setup:
Windows server 2016 standard edition.
SQL server 2016 standard edition.
2 nodes configured in a cluster without witness quorum.
all member of the same Active Directory domain.
1 Availability ...
0
votes
0
answers
338
views
CreatingDC not updating after Domain controller Migration
Recently we have switched our domain controller and during the migration I have noticed on the cluster manager the below error
Cluster network name resource 'Cluster Name' encountered an error ...
- 1,007
2
votes
0
answers
29
views
Default Schema not being applied even after setting default schema and default DB
Hello Stack Exchange!
I have an interesting problem! Let me set the stage for you:
1) Windows Authentication
2) Default Schema identityiq has been set for the user with login XCORP\USERA
3) ...
- 121
2
votes
1
answer
2k
views
Linux sqlcmd connecting to Windows Sql Server using kerberos
I'm pretty sure I am going to have to expand upon this a bit as I am new, and my question is probably not clear.
I have an Active Directory environment that includes a Microsoft SQL Server running ...
- 121
4
votes
1
answer
376
views
Refresh SQL Server's service account security group membership
Consider a SQL Server whose service account is a Managed Service Account in Active Directory. When this MSA is added to a security group, this group membership is not immediately going to take effect ...
- 725
1
vote
2
answers
3k
views
Invoke-SQLCMD with special characters
I'm currently working on a project integrating AD with SQL Server data, which I am
handling mainly via powershell (Invoke-SQLCMD in particular). The issue I'm running into is if someone has a special ...
- 188
1
vote
1
answer
311
views
Add a DL as a login in azure sql managed instace
I am able to add individual AD logins as a login in azure sql managed instance, when i try to add a DL is the same way i am getting the following error.
error: Principal '' could not be found or this ...
- 131
0
votes
0
answers
26
views
Azure Sql database AAD user not getting created
I need to create an AAD user for a Windows security group that was recently synchronised with Azure AD. This security group has spaces in its name.
I am using the below SQL script but it keeps ...
- 77
1
vote
0
answers
20
views
Oracle 12c - Installing SW with an Active Directory Account on RHEL7
My client insists on installing Oracle using an Active Directory Account as the SW owner instead of creating a local oracle service account on RHEL7.
I'm opposed, but willing to be flexible to meet ...
- 187
2
votes
1
answer
582
views
SSMS cannot determine if remote computer is connected to domain
I've recently set up a new server with an SQL instance running on it (2017), I am able to connect to the server remotely using SSMS, but when I try to add a new login, I receive the attached error. ...
0
votes
0
answers
110
views
mssql + sssd Ubuntu cannot login via AD group
I've got mssql 14.0.3192.2-2 setup unter Ubuntu; I have joined my machine to AD as described here.
The Windows login via SSMS and sqlcmd works if I add invididual AD users, but not if I add groups.
...
- 1
0
votes
1
answer
150
views
Implementing gMSA account for SQL FCI
I have a question on implementing gMSA account for managing authentication to SQL server.
Our goal is to use gMSA account to manage the auto password change activities for SQl server service and it's ...
- 2,127
2
votes
1
answer
804
views
Msg 15404, Level 16, State 10, Procedure xp_logininfo - missing permissions [duplicate]
I have a server based in the USA, where I am not a domain admin, and my permissions are limited to sql server only - where I am sysadmin.
after a migration of a few databases to a new server, I ...
- 14.8k