Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.databases.ms-sqlserver > #821 > unrolled thread

about Windows authentication

Back to article view | Back to comp.databases.ms-sqlserver

Contents

  about Windows authentication "Tony" <johansson.andersson@telia.com> - 2011-11-23 10:51 +0100
    Re: about Windows authentication Erland Sommarskog <esquel@sommarskog.se> - 2011-11-23 11:31 +0000
      Re: about Windows authentication "Tony" <johansson.andersson@telia.com> - 2011-11-23 12:56 +0100

#821 — about Windows authentication

Hello!

I just wonder about this Windows authentication. If I connect to SQLServer 
by using Microsoft SQL Management Studio I can see that under Security-> 
Logins I see an entry HomePC\Tony.
This entry exist both in the SQL Server Standard Edition and the SQL 
ServerExpress Edition

Now to my question When was these two accounts created because I have not 
added these two ?
I assume that these two was automatically added when I installed SQL Server 
?
Is that correct understood ?

//Tony 

[toc] | [next] | [standalone]

#823

Tony (johansson.andersson@telia.com) writes:
> Now to my question When was these two accounts created because I have
> not added these two ? I assume that these two was automatically added
> when I installed SQL Server ? Is that correct understood ? 
 
When you ran the Setup wizard, you were prompted to add a user to be 
sysadmin, and there was a button Add Current User, and that answers your
question.

Although, it does not really stop there. Say that you would add a new 
Windows user on your machine and log into Windows with this user. I would
expect that this new user would be able to connect to at least the Express 
instance. This is because with Express, Setup automatically add the group 
BUILTIN\Users to SQL Server. (I don't think this happens with Standard.)

More generally, you can get access to an SQL Server instance, solely by 
being member of a Windows group. This is useful in bigger corporations, 
since this permits an administrator to give a new employee access to a 
number of resources - file shares, printers, databases etc - by a single 
addition to the Active Directory.

-- 
Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

[toc] | [prev] | [next] | [standalone]

#825

"Erland Sommarskog" <esquel@sommarskog.se> skrev i meddelandet 
news:Xns9FA67F5A617A7Yazorman@127.0.0.1...
> Tony (johansson.andersson@telia.com) writes:
>> Now to my question When was these two accounts created because I have
>> not added these two ? I assume that these two was automatically added
>> when I installed SQL Server ? Is that correct understood ?
>
> When you ran the Setup wizard, you were prompted to add a user to be
> sysadmin, and there was a button Add Current User, and that answers your
> question.
>
> Although, it does not really stop there. Say that you would add a new
> Windows user on your machine and log into Windows with this user. I would
> expect that this new user would be able to connect to at least the Express
> instance. This is because with Express, Setup automatically add the group
> BUILTIN\Users to SQL Server. (I don't think this happens with Standard.)
>
> More generally, you can get access to an SQL Server instance, solely by
> being member of a Windows group. This is useful in bigger corporations,
> since this permits an administrator to give a new employee access to a
> number of resources - file shares, printers, databases etc - by a single
> addition to the Active Directory.
>
> -- 
> Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se
>
> Books Online for SQL Server 2005 at
> http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
> Books Online for SQL Server 2000 at
> http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

Good explained!

//Tony 

[toc] | [prev] | [standalone]

Back to top | Article view | comp.databases.ms-sqlserver

csiph-web