Questions tagged [active-directory]
Active Directory is a special-purpose database which stores network, user and printer data in a hierarchical, replicated, and extensible form.
114
questions
0
votes
0answers
9 views
mssql + sssd Ubuntu cannot login via AD group
I've got mssql 14.0.3192.2-2 setup unter Ubuntu; I have joined my machine to AD as described here.
The Windows login via SSMS and sqlcmd works if I add invididual AD users, but not if I add groups.
...
0
votes
1answer
15 views
Implementing gMSA account for SQL FCI
I have a question on implementing gMSA account for managing authentication to SQL server.
Our goal is to use gMSA account to manage the auto password change activities for SQl server service and it's ...
2
votes
1answer
25 views
Msg 15404, Level 16, State 10, Procedure xp_logininfo - missing permissions [duplicate]
I have a server based in the USA, where I am not a domain admin, and my permissions are limited to sql server only - where I am sysadmin.
after a migration of a few databases to a new server, I ...
2
votes
2answers
132 views
The Target Principal Name Is Incorrect. Cannot Generate SSPI Context (SQL or AD Issue)?
We had a power outage last night and when the server came back up our domain users could not access our SQL Server 2000 instance name: MASSQL.
We can access using SQL Authentication.
We tried making ...
0
votes
0answers
17 views
SQL Server 2017 two different Netbios names
Situation:
Migrating SQL Server database from 2003 to SQL Server 2017 moving to new hardware. SQL Server 2003 is on a machine with a netbios name of "Albert" on port X.X.1.22
Installed new SQL ...
1
vote
0answers
66 views
SSRS Azure SQL Database Active Directory - Universal with MFA
Does anyone know when support for Active Directory - Universal with MFA will be included in Reporting Services?
It's available in SSMS.
Visual Studio 2017 Data Source Properties
Reporting Server ...
0
votes
0answers
24 views
Authenticate Oracle Users (DBs on Linux Servers) through AD Without Buying Any New Products
We are wanting to authenticate Oracle Users (DBs on Linux Servers) through Active Directory Without Buying Any New Products. We don't want to buy any Oracle products such as OID/OUD etc.
1.) Is there ...
3
votes
2answers
303 views
CREATE ASSEMBLY System.DirectoryServices.AccountManagement.dll without enabling TRUSTWORTHY
First, this is for SQL Server 2016. If I was on 2017+, I would be using sp_add_trusted_assembly. Just wanted to clarify that before asking the question.
How do you register the assembly System....
0
votes
1answer
206 views
“Active Directory - Password” login in SSMS for Azure AD - Password expired
I'm trying to connect to an Azure SQL DB through SSMS (v17.9.1), using an Azure AD user, that is an Active Directory Admin for my SQL Server that hosts my Azure SQL Database.
I'm able to login with ...
1
vote
0answers
368 views
Grant permissions over linked server
I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
1
vote
3answers
228 views
NTLM vs Kerberos authentication - questions
We have 4 servers, all are members of the same Domain:
1. SQL 2012 on Windows Server 2016
2. SQL 2012 on Windows Server 2012
3. SQL 2017 on Windows Server 2016
4. SQL 2017 on Windows Server 2016
I ...
0
votes
1answer
39 views
Concern on Active Directory Users on Azure SQL Server
I was able to add Azure Active Directory Users to Azure Sql server. My question is not related in including or removing an Azure AD user, but its existence after the user ceases himself/herself.
My ...
0
votes
0answers
28 views
How to add a domain user to windows version postgresql?
I have a windows server 2012R2 (domain member) and a postgresql 9.3 which is installed on it. Now, I want to add a domain user to the postgresql, but I can't find any solution. Any help would be ...
1
vote
1answer
34 views
SQL Server 11.0 and AD Groups
I have a user that has his Active Directory logon set to allow logging into a specific SQL Server, and that works fine. This user is also part of an AD Group that has access to a specific database on ...
1
vote
0answers
99 views
SQL Server in Azure VM + Azure AD + SSIS - how to authenticate?
Our configuration:
Windows Server 2016 VM in Azure, running SQL Server (same as on-prem version)
Azure Active Directory with users etc.
Local Windows 10 PCs are joined to the AAD domain
SQL Server ...
1
vote
1answer
50 views
Microsoft SQL Server v13 bulk add users from active directory
I would like to import all users from Active Directory into Security/Users.
What I do is the following:
Go to Security -> Users
Right click Users -> New User...
User type: Windows user, click on '......
5
votes
1answer
482 views
Service Principal as SQL Active Directory Admin, does it use Graph API?
I'm looking to use a service principal as the server admin, so it can be used in a release pipeline to create further active directory users.
I'm successfully able to make the service principal the ...
0
votes
0answers
31 views
Azure SQL database AAD user can't connect
I've read through the documentation and have tried many, many things to get this to work but am still having trouble.
The AAD user is a member of a group that has been provisioned Contributor ...
1
vote
0answers
20 views
Extracting AD subgroups information [duplicate]
I need to extract AD groups and all of it's subgroup into an excel sheet.Basically the script should loop though each of the AD group and get their subgroup.
AD_Group Subgroup
---------- -----...
2
votes
2answers
757 views
Active Directory not working through SQL server Management studio
I have created a Group in SQL Server and add an Active Directory group to it with which contains users.
When I try to login through Windows authentication, it gives me the following error:
Login ...
2
votes
0answers
95 views
Just one Active Directory group will not sync to SQL Server
Modifying the Active Directory group membership for a particular user propagates to our SQL Server instances as expected — except when one specific group is added. What is causing this issue, ...
-1
votes
2answers
4k views
How to login to SQL Server using AD user
I created an AD user through Administration tool
then performed following commands:
-- Add AD user EX. thu1 to database master
USE [master]
GO
CREATE LOGIN [QALAB\ABC1] FROM WINDOWS WITH ...
2
votes
0answers
13 views
Is it possible to join servers that are already in a database mirroring session into an Active Directory domain?
We have created a SQL Server database mirroring session on two workgroup servers(not in any domain). Now we are asked to join those two servers into a domain. Is this possible without rebuild the ...
0
votes
3answers
3k views
Why use domain account for SQL Server service?
I'd like to know the pros and cons of using domain accounts vs using local accounts.
Any help will be appreciated.
3
votes
1answer
523 views
Can't deploy SSIS package - The certificate chain was issued by an authority that is not trusted
I have an Azure Windows Server in a managed Domain (AD Domain Services) running SQL Server Enterprise.
I am trying to simply deploy a local (laptop) SSIS project to the remote SSIS server. When the ...
1
vote
0answers
494 views
LDAP Authentication - SQL Server 2017 on Linux
We have installed SQL Server 2017 on Linux server. I am able to connect SQL Server locally as well remotely but with local user access.
I have my AD account created and have AD server information. ...
3
votes
1answer
886 views
set Windows authentication for postgres
I'm trying to set Windows authentication for a postgres server.
The process is not well documented and makes the whole thing, obscure.
I found this doc but it is quite unclear.
In the necessary ...
0
votes
1answer
233 views
Single Domain Controller for SQL Server Always On Availability Group
I was wondering if SQL Server Always On Availability Group supports a single Domain Controller server as opposed to 2 Domain Controllers in every example I've seen. I ask because I suspect that this ...
7
votes
1answer
2k views
Query External LDAP Server from SQL Server
I have done extensive research on querying LDAP Server but so far has not been able to work around. Therefore, asking experts help
Background: I have a client whose LDAP Server is OnPremise (though ...
1
vote
1answer
1k views
Windows Authentication for SQL Server Linked Servers
Currently, on our project, we have a situation: there are a SQL Server 2012 instance IA in domain A and MS SQL Server 2012 instance IB in domain B. Domains A and B are trusted. IB configured as the ...
0
votes
1answer
3k views
Oracle Database authentication through Active Directory
We have Oracle 11g database running on a RHEL 6 server.
and we have a Active Directory domain running on windows 2008 server in same network.
I want to authenticate Oracle database users using this ...
1
vote
1answer
36 views
Autorise computer accounts through AD group
I would like to grant SQL access for computer accounts.
It works if I declare a login for each account, like CREATE LOGIN [contoso.com\srv1$] FROM WINDOWS
but I can't make it works when using a AD ...
0
votes
1answer
48 views
Communication between DB servers outside Active Directory
Dear SQL Server / Windows PROs:
I am trying to set up a solution here (based on SQL Server 2012 Std + Windows Server 2012 R2).
Currently the setup is based on a Cluster (two servers, 1 SAN) and stand ...
3
votes
1answer
2k views
Unable to connect using Azure AD Service Principal on SQL Server
I'm having trouble testing a connection to Azure SQL Server using SSMS with an active directory service principal.
I have an AD Admin account created, and have successfully added a colleague's AD ...
2
votes
1answer
166 views
troubleshooting login failure when AD group seems to be fine
I am using the procedure xp_logininfo to find out what groups a user belongs to.
I have created an AD group called SQLDBA, and added myself to it,
then created a login and granted sysadmin to the ...
3
votes
2answers
430 views
What are points to consider when replacing the SQL Server service account?
In What are the implications of changing the SQL Server Service Logon Account? it mentions that when replacing the SQL Server service account, the service will need to be restarted.
But there is more ...
1
vote
0answers
451 views
Occasional Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error
I know that this issue has been discussed elsewhere and I already read it. Our problem is that this occurs only once a day (roughly), the rest of time everything works fine.
SERVER RS
Windows Server ...
4
votes
4answers
2k views
See who has access to databases via AD group membership
SharePoint has a button to "Check Permissions". Here you can select a user from Active Directory, and it will magically traverse groups and show you all the access the user has on the site based on ...
0
votes
1answer
65 views
Row-based Permission in SQL Server Newbie Question
I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
0
votes
0answers
32 views
AD Service Account Changes
Are there any ways that can seamlessly enable the operational continuity of the Application upon a Service Account Password Change at Active Directory Level?
Any Ways?
Any Tools?
1
vote
1answer
98 views
Using Mixed mode authentication to authenticate Active Directory users to an application
I have a vendor supplied application that I have very limited access to change. The application controls a machine, and cannot easily be logged off between users (expect up to 5 user changes per hour)...
2
votes
2answers
1k views
Active Directory to authenticate user access to Postgres DB through ODBC driver. Is this possible?
I need for a user to logon to a Postgres DB through either MS Excel or Power BI, without entering any credentials, using solely their Active Directory login. I'm mainly a BI Developer and not usually ...
1
vote
2answers
93 views
Difference Between Sign In and Login (Users and Groups)
I am trying to understand a paragraph from my notes, re Users and Groups in Active Directory. The phrase is:
Users and Groups Sign in, they do not login.
Now, what I (think I) understand is that ...
5
votes
2answers
293 views
IS_MEMBER() in Azure SQLDB not working for AD groups?
I am trying set up RLS and want to leverage AD groups.
DB is created in Azure, and I know AD is working as I can connect using AD acount with SSMS
First test Local Machine, is working as expected (...
3
votes
2answers
4k views
Cannot login to SQL Server as a member of AD group
I have created a login for an AD group:
CREATE LOGIN [MYDOMAIN\Development Admins] FROM WINDOWS WITH DEFAULT_DATABASE=[master]
One of the members of that AD group is a user named DBGuy. I can see ...
1
vote
1answer
947 views
How to change db owner after the associated AD account is disabled
The new Senior DBA requested that the previous Senior DBA's Active Directory account be disabled. He forgot to check, however, for databases where the previous DBA was the owner. We now have ~60 ...
0
votes
0answers
425 views
Resolving SSPI Handshake Failures to Specific User via tracert
Overnight I started receiving A LOT of failed logins and SSPI handshake errors (as indicated below). Now, I can open command prompt and resolve that IP address to a machine name using either >...
1
vote
1answer
585 views
Is password complexity policy linked to Active Directory in SQL Server
We have a change in policy in the organisation and a password complexity policy will be applied to active directory. I know when Enforce password complexity is checked on a SQL Server login it gets it ...
1
vote
2answers
852 views
Should domain “Users” group be removed from the SQL logins for database security?
I am coming from a security standpoint. I see quite a lot of SQL DBs with the entire domain "Users" group ("XXX Domain\Users") added as a login account in SQL.
Does this mean that all users in the ...
1
vote
0answers
66 views
Login token does not acquire correct principal_id for some AD group server principals
The title reflects what I believe is the problem based on my research up to this point. Nonetheless, I will include back information in case it's relevant.
Back info:
Server:
SQL Server 2008 R2
...
