Questions tagged [active-directory]
Active Directory is a special-purpose database which stores network, user and printer data in a hierarchical, replicated, and extensible form.
119
questions
0
votes
1answer
80 views
Linux sqlcmd connecting to Windows Sql Server using kerberos
I'm pretty sure I am going to have to expand upon this a bit as I am new, and my question is probably not clear.
I have an Active Directory environment that includes a Microsoft SQL Server running ...
4
votes
1answer
72 views
Refresh SQL Server's service account security group membership
Consider a SQL Server whose service account is a Managed Service Account in Active Directory. When this MSA is added to a security group, this group membership is not immediately going to take effect ...
1
vote
2answers
207 views
Invoke-SQLCMD with special characters
I'm currently working on a project integrating AD with SQL Server data, which I am
handling mainly via powershell (Invoke-SQLCMD in particular). The issue I'm running into is if someone has a special ...
0
votes
0answers
33 views
Add a DL as a login in azure sql managed instace
I am able to add individual AD logins as a login in azure sql managed instance, when i try to add a DL is the same way i am getting the following error.
error: Principal '' could not be found or this ...
0
votes
0answers
14 views
Azure Sql database AAD user not getting created
I need to create an AAD user for a Windows security group that was recently synchronised with Azure AD. This security group has spaces in its name.
I am using the below SQL script but it keeps ...
1
vote
0answers
19 views
Oracle 12c - Installing SW with an Active Directory Account on RHEL7
My client insists on installing Oracle using an Active Directory Account as the SW owner instead of creating a local oracle service account on RHEL7.
I'm opposed, but willing to be flexible to meet ...
0
votes
0answers
25 views
SSMS cannot determine if remote computer is connected to domain
I've recently set up a new server with an SQL instance running on it (2017), I am able to connect to the server remotely using SSMS, but when I try to add a new login, I receive the attached error. ...
0
votes
0answers
39 views
mssql + sssd Ubuntu cannot login via AD group
I've got mssql 14.0.3192.2-2 setup unter Ubuntu; I have joined my machine to AD as described here.
The Windows login via SSMS and sqlcmd works if I add invididual AD users, but not if I add groups.
...
0
votes
1answer
47 views
Implementing gMSA account for SQL FCI
I have a question on implementing gMSA account for managing authentication to SQL server.
Our goal is to use gMSA account to manage the auto password change activities for SQl server service and it's ...
2
votes
1answer
129 views
Msg 15404, Level 16, State 10, Procedure xp_logininfo - missing permissions [duplicate]
I have a server based in the USA, where I am not a domain admin, and my permissions are limited to sql server only - where I am sysadmin.
after a migration of a few databases to a new server, I ...
3
votes
3answers
2k views
The Target Principal Name Is Incorrect. Cannot Generate SSPI Context (SQL or AD Issue)?
We had a power outage last night and when the server came back up our domain users could not access our SQL Server 2000 instance name: MASSQL.
We can access using SQL Authentication.
We tried making ...
0
votes
0answers
21 views
SQL Server 2017 two different Netbios names
Situation:
Migrating SQL Server database from 2003 to SQL Server 2017 moving to new hardware. SQL Server 2003 is on a machine with a netbios name of "Albert" on port X.X.1.22
Installed new SQL ...
1
vote
0answers
123 views
SSRS Azure SQL Database Active Directory - Universal with MFA
Does anyone know when support for Active Directory - Universal with MFA will be included in Reporting Services?
It's available in SSMS.
Visual Studio 2017 Data Source Properties
Reporting Server ...
0
votes
0answers
32 views
Authenticate Oracle Users (DBs on Linux Servers) through AD Without Buying Any New Products
We are wanting to authenticate Oracle Users (DBs on Linux Servers) through Active Directory Without Buying Any New Products. We don't want to buy any Oracle products such as OID/OUD etc.
1.) Is there ...
3
votes
2answers
386 views
CREATE ASSEMBLY System.DirectoryServices.AccountManagement.dll without enabling TRUSTWORTHY
First, this is for SQL Server 2016. If I was on 2017+, I would be using sp_add_trusted_assembly. Just wanted to clarify that before asking the question.
How do you register the assembly System....
0
votes
1answer
397 views
“Active Directory - Password” login in SSMS for Azure AD - Password expired
I'm trying to connect to an Azure SQL DB through SSMS (v17.9.1), using an Azure AD user, that is an Active Directory Admin for my SQL Server that hosts my Azure SQL Database.
I'm able to login with ...
1
vote
0answers
621 views
Grant permissions over linked server
I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
1
vote
3answers
649 views
NTLM vs Kerberos authentication - questions
We have 4 servers, all are members of the same Domain:
1. SQL 2012 on Windows Server 2016
2. SQL 2012 on Windows Server 2012
3. SQL 2017 on Windows Server 2016
4. SQL 2017 on Windows Server 2016
I ...
0
votes
1answer
42 views
Concern on Active Directory Users on Azure SQL Server
I was able to add Azure Active Directory Users to Azure Sql server. My question is not related in including or removing an Azure AD user, but its existence after the user ceases himself/herself.
My ...
1
vote
1answer
36 views
SQL Server 11.0 and AD Groups
I have a user that has his Active Directory logon set to allow logging into a specific SQL Server, and that works fine. This user is also part of an AD Group that has access to a specific database on ...
1
vote
0answers
168 views
SQL Server in Azure VM + Azure AD + SSIS - how to authenticate?
Our configuration:
Windows Server 2016 VM in Azure, running SQL Server (same as on-prem version)
Azure Active Directory with users etc.
Local Windows 10 PCs are joined to the AAD domain
SQL Server ...
1
vote
1answer
53 views
Microsoft SQL Server v13 bulk add users from active directory
I would like to import all users from Active Directory into Security/Users.
What I do is the following:
Go to Security -> Users
Right click Users -> New User...
User type: Windows user, click on '......
5
votes
1answer
602 views
Service Principal as SQL Active Directory Admin, does it use Graph API?
I'm looking to use a service principal as the server admin, so it can be used in a release pipeline to create further active directory users.
I'm successfully able to make the service principal the ...
1
vote
0answers
22 views
Extracting AD subgroups information [duplicate]
I need to extract AD groups and all of it's subgroup into an excel sheet.Basically the script should loop though each of the AD group and get their subgroup.
AD_Group Subgroup
---------- -----...
2
votes
2answers
1k views
Active Directory not working through SQL server Management studio
I have created a Group in SQL Server and add an Active Directory group to it with which contains users.
When I try to login through Windows authentication, it gives me the following error:
Login ...
2
votes
0answers
144 views
Just one Active Directory group will not sync to SQL Server
Modifying the Active Directory group membership for a particular user propagates to our SQL Server instances as expected — except when one specific group is added. What is causing this issue, ...
-1
votes
2answers
5k views
How to login to SQL Server using AD user
I created an AD user through Administration tool
then performed following commands:
-- Add AD user EX. thu1 to database master
USE [master]
GO
CREATE LOGIN [QALAB\ABC1] FROM WINDOWS WITH ...
2
votes
0answers
13 views
Is it possible to join servers that are already in a database mirroring session into an Active Directory domain?
We have created a SQL Server database mirroring session on two workgroup servers(not in any domain). Now we are asked to join those two servers into a domain. Is this possible without rebuild the ...
0
votes
3answers
5k views
Why use domain account for SQL Server service?
I'd like to know the pros and cons of using domain accounts vs using local accounts.
Any help will be appreciated.
3
votes
1answer
693 views
Can't deploy SSIS package - The certificate chain was issued by an authority that is not trusted
I have an Azure Windows Server in a managed Domain (AD Domain Services) running SQL Server Enterprise.
I am trying to simply deploy a local (laptop) SSIS project to the remote SSIS server. When the ...
1
vote
0answers
609 views
LDAP Authentication - SQL Server 2017 on Linux
We have installed SQL Server 2017 on Linux server. I am able to connect SQL Server locally as well remotely but with local user access.
I have my AD account created and have AD server information. ...
3
votes
1answer
1k views
set Windows authentication for postgres
I'm trying to set Windows authentication for a postgres server.
The process is not well documented and makes the whole thing, obscure.
I found this doc but it is quite unclear.
In the necessary ...
0
votes
1answer
270 views
Single Domain Controller for SQL Server Always On Availability Group
I was wondering if SQL Server Always On Availability Group supports a single Domain Controller server as opposed to 2 Domain Controllers in every example I've seen. I ask because I suspect that this ...
7
votes
1answer
3k views
Query External LDAP Server from SQL Server
I have done extensive research on querying LDAP Server but so far has not been able to work around. Therefore, asking experts help
Background: I have a client whose LDAP Server is OnPremise (though ...
1
vote
1answer
2k views
Windows Authentication for SQL Server Linked Servers
Currently, on our project, we have a situation: there are a SQL Server 2012 instance IA in domain A and MS SQL Server 2012 instance IB in domain B. Domains A and B are trusted. IB configured as the ...
0
votes
1answer
4k views
Oracle Database authentication through Active Directory
We have Oracle 11g database running on a RHEL 6 server.
and we have a Active Directory domain running on windows 2008 server in same network.
I want to authenticate Oracle database users using this ...
1
vote
1answer
37 views
Autorise computer accounts through AD group
I would like to grant SQL access for computer accounts.
It works if I declare a login for each account, like CREATE LOGIN [contoso.com\srv1$] FROM WINDOWS
but I can't make it works when using a AD ...
0
votes
1answer
50 views
Communication between DB servers outside Active Directory
Dear SQL Server / Windows PROs:
I am trying to set up a solution here (based on SQL Server 2012 Std + Windows Server 2012 R2).
Currently the setup is based on a Cluster (two servers, 1 SAN) and stand ...
3
votes
1answer
3k views
Unable to connect using Azure AD Service Principal on SQL Server
I'm having trouble testing a connection to Azure SQL Server using SSMS with an active directory service principal.
I have an AD Admin account created, and have successfully added a colleague's AD ...
1
vote
1answer
193 views
troubleshooting login failure when AD group seems to be fine
I am using the procedure xp_logininfo to find out what groups a user belongs to.
I have created an AD group called SQLDBA, and added myself to it,
then created a login and granted sysadmin to the ...
3
votes
2answers
542 views
What are points to consider when replacing the SQL Server service account?
In What are the implications of changing the SQL Server Service Logon Account? it mentions that when replacing the SQL Server service account, the service will need to be restarted.
But there is more ...
1
vote
0answers
561 views
Occasional Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error
I know that this issue has been discussed elsewhere and I already read it. Our problem is that this occurs only once a day (roughly), the rest of time everything works fine.
SERVER RS
Windows Server ...
4
votes
4answers
3k views
See who has access to databases via AD group membership
SharePoint has a button to "Check Permissions". Here you can select a user from Active Directory, and it will magically traverse groups and show you all the access the user has on the site based on ...
0
votes
1answer
69 views
Row-based Permission in SQL Server Newbie Question
I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
0
votes
0answers
32 views
AD Service Account Changes
Are there any ways that can seamlessly enable the operational continuity of the Application upon a Service Account Password Change at Active Directory Level?
Any Ways?
Any Tools?
1
vote
1answer
114 views
Using Mixed mode authentication to authenticate Active Directory users to an application
I have a vendor supplied application that I have very limited access to change. The application controls a machine, and cannot easily be logged off between users (expect up to 5 user changes per hour)...
2
votes
2answers
2k views
Active Directory to authenticate user access to Postgres DB through ODBC driver. Is this possible?
I need for a user to logon to a Postgres DB through either MS Excel or Power BI, without entering any credentials, using solely their Active Directory login. I'm mainly a BI Developer and not usually ...
1
vote
2answers
99 views
Difference Between Sign In and Login (Users and Groups)
I am trying to understand a paragraph from my notes, re Users and Groups in Active Directory. The phrase is:
Users and Groups Sign in, they do not login.
Now, what I (think I) understand is that ...
6
votes
2answers
419 views
IS_MEMBER() in Azure SQLDB not working for AD groups?
I am trying set up RLS and want to leverage AD groups.
DB is created in Azure, and I know AD is working as I can connect using AD acount with SSMS
First test Local Machine, is working as expected (...
3
votes
3answers
5k views
Cannot login to SQL Server as a member of AD group
I have created a login for an AD group:
CREATE LOGIN [MYDOMAIN\Development Admins] FROM WINDOWS WITH DEFAULT_DATABASE=[master]
One of the members of that AD group is a user named DBGuy. I can see ...
