Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

  7. current community

    your communities

    more stack exchange communities

    company blog
Database Administrators

Questions tagged [active-directory]

Active Directory is a special-purpose database which stores network, user and printer data in a hierarchical, replicated, and extensible form.

113 questions
Info Newest Frequent Votes Active Unanswered
0
votes
0answers
13 views

SQL Server 2017 two different Netbios names

Situation: Migrating SQL Server database from 2003 to SQL Server 2017 moving to new hardware. SQL Server 2003 is on a machine with a netbios name of "Albert" on port X.X.1.22 Installed new SQL ...
1
vote
0answers
18 views

SSRS Azure SQL Database Active Directory - Universal with MFA

Does anyone know when support for Active Directory - Universal with MFA will be included in Reporting Services? It's available in SSMS. Visual Studio 2017 Data Source Properties Reporting Server ...
0
votes
0answers
15 views

Authenticate Oracle Users (DBs on Linux Servers) through AD Without Buying Any New Products

We are wanting to authenticate Oracle Users (DBs on Linux Servers) through Active Directory Without Buying Any New Products. We don't want to buy any Oracle products such as OID/OUD etc. 1.) Is there ...
3
votes
2answers
231 views

CREATE ASSEMBLY System.DirectoryServices.AccountManagement.dll without enabling TRUSTWORTHY

First, this is for SQL Server 2016. If I was on 2017+, I would be using sp_add_trusted_assembly. Just wanted to clarify that before asking the question. How do you register the assembly System....
0
votes
1answer
51 views

“Active Directory - Password” login in SSMS for Azure AD - Password expired

I'm trying to connect to an Azure SQL DB through SSMS (v17.9.1), using an Azure AD user, that is an Active Directory Admin for my SQL Server that hosts my Azure SQL Database. I'm able to login with ...
1
vote
0answers
108 views

Grant permissions over linked server

I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
1
vote
3answers
70 views

NTLM vs Kerberos authentication - questions

We have 4 servers, all are members of the same Domain: 1. SQL 2012 on Windows Server 2016 2. SQL 2012 on Windows Server 2012 3. SQL 2017 on Windows Server 2016 4. SQL 2017 on Windows Server 2016 I ...
0
votes
1answer
27 views

Concern on Active Directory Users on Azure SQL Server

I was able to add Azure Active Directory Users to Azure Sql server. My question is not related in including or removing an Azure AD user, but its existence after the user ceases himself/herself. My ...
0
votes
0answers
25 views

How to add a domain user to windows version postgresql?

I have a windows server 2012R2 (domain member) and a postgresql 9.3 which is installed on it. Now, I want to add a domain user to the postgresql, but I can't find any solution. Any help would be ...
1
vote
1answer
34 views

SQL Server 11.0 and AD Groups

I have a user that has his Active Directory logon set to allow logging into a specific SQL Server, and that works fine. This user is also part of an AD Group that has access to a specific database on ...
1
vote
0answers
36 views

SQL Server in Azure VM + Azure AD + SSIS - how to authenticate?

Our configuration: Windows Server 2016 VM in Azure, running SQL Server (same as on-prem version) Azure Active Directory with users etc. Local Windows 10 PCs are joined to the AAD domain SQL Server ...
1
vote
1answer
45 views

Microsoft SQL Server v13 bulk add users from active directory

I would like to import all users from Active Directory into Security/Users. What I do is the following: Go to Security -> Users Right click Users -> New User... User type: Windows user, click on '......
5
votes
1answer
273 views

Service Principal as SQL Active Directory Admin, does it use Graph API?

I'm looking to use a service principal as the server admin, so it can be used in a release pipeline to create further active directory users. I'm successfully able to make the service principal the ...
0
votes
0answers
21 views

Azure SQL database AAD user can't connect

I've read through the documentation and have tried many, many things to get this to work but am still having trouble. The AAD user is a member of a group that has been provisioned Contributor ...
1
vote
0answers
20 views

Extracting AD subgroups information [duplicate]

I need to extract AD groups and all of it's subgroup into an excel sheet.Basically the script should loop though each of the AD group and get their subgroup. AD_Group Subgroup ---------- -----...
2
votes
2answers
398 views

Active Directory not working through SQL server Management studio

I have created a Group in SQL Server and add an Active Directory group to it with which contains users. When I try to login through Windows authentication, it gives me the following error: Login ...
2
votes
0answers
59 views

Just one Active Directory group will not sync to SQL Server

Modifying the Active Directory group membership for a particular user propagates to our SQL Server instances as expected — except when one specific group is added. What is causing this issue, ...
0
votes
0answers
250 views

LDAP linked server in SQL Server: what connectivity is required?

In an instance of SQL Server I have created a Linked Server for LDAP queries. EXEC master.dbo.sp_addlinkedserver @server = N'LDAP', @srvproduct=N'Active Directory Service Interfaces', @provider=N'...
0
votes
0answers
27 views

Login failed for user in Domain1 who is part of a Group in Domain2 which was added to SQL Server in Domain3

Here is the scenario which I am working with IT team to get it right with no luck. Following are the users who work on a SQL Server. Domain1\User1 Domain2\User1 Domain2\User2 There is AD group on ...
-1
votes
2answers
3k views

How to login to SQL Server using AD user

I created an AD user through Administration tool then performed following commands: -- Add AD user EX. thu1 to database master USE [master] GO CREATE LOGIN [QALAB\ABC1] FROM WINDOWS WITH ...
2
votes
0answers
12 views

Is it possible to join servers that are already in a database mirroring session into an Active Directory domain?

We have created a SQL Server database mirroring session on two workgroup servers(not in any domain). Now we are asked to join those two servers into a domain. Is this possible without rebuild the ...
0
votes
3answers
3k views

Why use domain account for SQL Server service?

I'd like to know the pros and cons of using domain accounts vs using local accounts. Any help will be appreciated.
4
votes
1answer
424 views

Can't deploy SSIS package - The certificate chain was issued by an authority that is not trusted

I have an Azure Windows Server in a managed Domain (AD Domain Services) running SQL Server Enterprise. I am trying to simply deploy a local (laptop) SSIS project to the remote SSIS server. When the ...
1
vote
0answers
417 views

LDAP Authentication - SQL Server 2017 on Linux

We have installed SQL Server 2017 on Linux server. I am able to connect SQL Server locally as well remotely but with local user access. I have my AD account created and have AD server information. ...
4
votes
1answer
652 views

set Windows authentication for postgres

I'm trying to set Windows authentication for a postgres server. The process is not well documented and makes the whole thing, obscure. I found this doc but it is quite unclear. In the necessary ...
0
votes
1answer
199 views

Single Domain Controller for SQL Server Always On Availability Group

I was wondering if SQL Server Always On Availability Group supports a single Domain Controller server as opposed to 2 Domain Controllers in every example I've seen. I ask because I suspect that this ...
7
votes
1answer
2k views

Query External LDAP Server from SQL Server

I have done extensive research on querying LDAP Server but so far has not been able to work around. Therefore, asking experts help Background: I have a client whose LDAP Server is OnPremise (though ...
1
vote
1answer
1k views

Windows Authentication for SQL Server Linked Servers

Currently, on our project, we have a situation: there are a SQL Server 2012 instance IA in domain A and MS SQL Server 2012 instance IB in domain B. Domains A and B are trusted. IB configured as the ...
0
votes
0answers
34 views

Microsoft Access 2016 wrong directory error

I am handling a two-week long program, which incorporates new pc-s in a factory. So far so good, but the problem is with Microsoft Access. When I try to access a *.mdb file in a network drive (given ...
0
votes
1answer
2k views

Oracle Database authentication through Active Directory

We have Oracle 11g database running on a RHEL 6 server. and we have a Active Directory domain running on windows 2008 server in same network. I want to authenticate Oracle database users using this ...
1
vote
1answer
36 views

Autorise computer accounts through AD group

I would like to grant SQL access for computer accounts. It works if I declare a login for each account, like CREATE LOGIN [contoso.com\srv1$] FROM WINDOWS but I can't make it works when using a AD ...
0
votes
1answer
47 views

Communication between DB servers outside Active Directory

Dear SQL Server / Windows PROs: I am trying to set up a solution here (based on SQL Server 2012 Std + Windows Server 2012 R2). Currently the setup is based on a Cluster (two servers, 1 SAN) and stand ...
3
votes
1answer
2k views

Unable to connect using Azure AD Service Principal on SQL Server

I'm having trouble testing a connection to Azure SQL Server using SSMS with an active directory service principal. I have an AD Admin account created, and have successfully added a colleague's AD ...
2
votes
1answer
132 views

troubleshooting login failure when AD group seems to be fine

I am using the procedure xp_logininfo to find out what groups a user belongs to. I have created an AD group called SQLDBA, and added myself to it, then created a login and granted sysadmin to the ...
3
votes
2answers
378 views

What are points to consider when replacing the SQL Server service account?

In What are the implications of changing the SQL Server Service Logon Account? it mentions that when replacing the SQL Server service account, the service will need to be restarted. But there is more ...
1
vote
0answers
372 views

Occasional Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error

I know that this issue has been discussed elsewhere and I already read it. Our problem is that this occurs only once a day (roughly), the rest of time everything works fine. SERVER RS Windows Server ...
4
votes
4answers
1k views

See who has access to databases via AD group membership

SharePoint has a button to "Check Permissions". Here you can select a user from Active Directory, and it will magically traverse groups and show you all the access the user has on the site based on ...
0
votes
1answer
62 views

Row-based Permission in SQL Server Newbie Question

I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
0
votes
0answers
32 views

AD Service Account Changes

Are there any ways that can seamlessly enable the operational continuity of the Application upon a Service Account Password Change at Active Directory Level? Any Ways? Any Tools?
1
vote
1answer
83 views

Using Mixed mode authentication to authenticate Active Directory users to an application

I have a vendor supplied application that I have very limited access to change. The application controls a machine, and cannot easily be logged off between users (expect up to 5 user changes per hour)...
1
vote
2answers
1k views

Active Directory to authenticate user access to Postgres DB through ODBC driver. Is this possible?

I need for a user to logon to a Postgres DB through either MS Excel or Power BI, without entering any credentials, using solely their Active Directory login. I'm mainly a BI Developer and not usually ...
1
vote
2answers
88 views

Difference Between Sign In and Login (Users and Groups)

I am trying to understand a paragraph from my notes, re Users and Groups in Active Directory. The phrase is: Users and Groups Sign in, they do not login. Now, what I (think I) understand is that ...
4
votes
0answers
180 views

IS_MEMBER() in Azure SQLDB not working for AD groups?

I am trying set up RLS and want to leverage AD groups. DB is created in Azure, and I know AD is working as I can connect using AD acount with SSMS First test Local Machine, is working as expected (...
3
votes
2answers
3k views

Cannot login to SQL Server as a member of AD group

I have created a login for an AD group: CREATE LOGIN [MYDOMAIN\Development Admins] FROM WINDOWS WITH DEFAULT_DATABASE=[master] One of the members of that AD group is a user named DBGuy. I can see ...
1
vote
1answer
815 views

How to change db owner after the associated AD account is disabled

The new Senior DBA requested that the previous Senior DBA's Active Directory account be disabled. He forgot to check, however, for databases where the previous DBA was the owner. We now have ~60 ...
0
votes
0answers
311 views

Resolving SSPI Handshake Failures to Specific User via tracert

Overnight I started receiving A LOT of failed logins and SSPI handshake errors (as indicated below). Now, I can open command prompt and resolve that IP address to a machine name using either >...
1
vote
1answer
434 views

Is password complexity policy linked to Active Directory in SQL Server

We have a change in policy in the organisation and a password complexity policy will be applied to active directory. I know when Enforce password complexity is checked on a SQL Server login it gets it ...
1
vote
2answers
717 views

Should domain “Users” group be removed from the SQL logins for database security?

I am coming from a security standpoint. I see quite a lot of SQL DBs with the entire domain "Users" group ("XXX Domain\Users") added as a login account in SQL. Does this mean that all users in the ...
1
vote
0answers
61 views

Login token does not acquire correct principal_id for some AD group server principals

The title reflects what I believe is the problem based on my research up to this point. Nonetheless, I will include back information in case it's relevant. Back info: Server: SQL Server 2008 R2 ...
0
votes
1answer
105 views

SQL Server: Mixed mode security: Can a non AD user (a local user, remote client) have a trusted connection to SQL?

I have used SQL Server trusted connections for years. It works well when the client app is a domain user. Imagine this three server config: dbserver webserver domain controller I now have a ...

1 2 3