How define users of another domain.

Hi everybody, i should have a little problem.
I must grant the access (using odbc) to users of domain "A" to a sql server
2000 instance running in another domain (domain "B").
Well, if the users read the database like user "sa" (defined in the odbc
connection) there aren't problems but if in the odbc connection is specified
the "trust connection" flag nobody can read data.
In sql server the users are defined both username and domain\username and
permissions are defined correctly.
What could i do?
Thanks in avance for your answers.
RobyHi
If your SQL Server is in Domain A, you need to setup a trust relationship
with Domain B at Active Directory level.
Then, when use "B\user1" presents it's credentials to the SQL Server, SQL
Server passes the request to the OS, which in turn passes it to Domain A's
domain controller, who in turn passes the request to Domain B's domain
controller.
The trusting is done at OS level. If you can not setup a trust, then you
need to keep using SQL Server Security.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"robyemme" <marautor@.tiscali.it> wrote in message
news:F1657283-F17A-40FC-9061-C0BFBA7DC569@.microsoft.com...
> Hi everybody, i should have a little problem.
> I must grant the access (using odbc) to users of domain "A" to a sql
> server
> 2000 instance running in another domain (domain "B").
> Well, if the users read the database like user "sa" (defined in the odbc
> connection) there aren't problems but if in the odbc connection is
> specified
> the "trust connection" flag nobody can read data.
> In sql server the users are defined both username and domain\username and
> permissions are defined correctly.
> What could i do?
> Thanks in avance for your answers.
> Roby
>

How could I obtain the domain name from SQL?

Dear fellows,
I would need from T-SQL job or through any friendly-user function (VB
front-end app) the aforementioned value.
With EXEC xp_cmdshell 'IPCONFIG /ALL' I get values such as HOST NAME or
IP Adress. Problem is the following: if oneself launch IPCONFIG /ALL from a
DOS session it is obtained DNS suffixes list with values hoped: domain,
Active Directory and so on. But launched from Query Analyzer due to it
returns more than a row appear as NULL value.
Does anyone know how/where it is available?
Best regards,> But launched from Query Analyzer due to it
> returns more than a row appear as NULL value.
Is this the only problem?
CREATE TABLE #foo(cmd VARCHAR(1024))
INSERT #foo EXEC master..xp_cmdshell 'IPCONFIG /ALL'
SELECT * FROM #foo WHERE cmd IS NOT NULL
DROP TABLE #foo|||Dear Aaron,
Is this the only problem?
No!
Your solution not works because of appers the line empty.
Thanks a lot for your support,
"Aaron Bertrand [SQL Server MVP]" wrote:

> Is this the only problem?
>
> CREATE TABLE #foo(cmd VARCHAR(1024))
> INSERT #foo EXEC master..xp_cmdshell 'IPCONFIG /ALL'
> SELECT * FROM #foo WHERE cmd IS NOT NULL
> DROP TABLE #foo
>
>|||> Your solution not works because of appers the line empty.
Okay, so is this really that difficult?
SELECT * FROM #foo WHERE cmd > ''

How come i can't add a domain user?

how come when i try to add a domain user/group i get this error:
Error 15401: Windows NT user or group 'MYDOMAIN\Domain Users' not found.
Check the name again.Hi,
See the reply from Bill from a old postregarding the same issue.
Hi Biva,
I see this is a complex problem as usually the suggestions should work.
The Enterprise Manager will use sp_grantlogin to grant permissions. When we
use sp_grantlogin to grant the permissions to a NT User, the stored
procedure calls
LookupAccountSid function and that function looks in the SID cache on the
local
computer before it goes to a domain controller. If the SID in the cache is
incorrect, then the problem would occur. This problem may occur if we
rename the User account. As far as I know, the only method is to reboot the
computer. However, you may check with Windows 2000 newsgroups for
suggestions, e.g. microsoft.public.win2000.gener­al,
microsoft.public.win2000.activ­e_directory.
In addition, this indicates that domain names are not resolved properly.
Please check in Administators Group in Computer Management. If domains
accounts that are members 'ARE NOT' showing up like this,
domain\account
Instead, they show up as a long string of numbers, then it indicates that
it is not resolved properly. Please check with Windows 2000 newsgroups to
see if they have any suggestions.
This posting is provided "AS IS" with no warranties, and confers no rights.
Regards,
Bill Cheng
Microsoft Support Engineer
Thanks
Hari
"James" <See.My.Sig@.The.Bottom.com> wrote in message
news:s1wIe.13389$Bx5.11303@.trnddc09...
> how come when i try to add a domain user/group i get this error:
> Error 15401: Windows NT user or group 'MYDOMAIN\Domain Users' not found.
> Check the name again.
>
>|||thank you, i found my problem tho, i needed to apply ISA 2004 standard
server's service pack 1. isa doesn't like win2003's sp1... isa's firewall
was stoping rpc.
"Hari Prasad" <hari_prasad_k@.hotmail.com> wrote in message
news:OTxmREUmFHA.2852@.TK2MSFTNGP15.phx.gbl...
> Hi,
> See the reply from Bill from a old postregarding the same issue.
> Hi Biva,
>
> I see this is a complex problem as usually the suggestions should work.
>
> The Enterprise Manager will use sp_grantlogin to grant permissions. When
> we
> use sp_grantlogin to grant the permissions to a NT User, the stored
> procedure calls
> LookupAccountSid function and that function looks in the SID cache on the
> local
> computer before it goes to a domain controller. If the SID in the cache is
> incorrect, then the problem would occur. This problem may occur if we
> rename the User account. As far as I know, the only method is to reboot
> the
> computer. However, you may check with Windows 2000 newsgroups for
> suggestions, e.g. microsoft.public.win2000.gener­al,
> microsoft.public.win2000.activ­e_directory.
>
> In addition, this indicates that domain names are not resolved properly.
> Please check in Administators Group in Computer Management. If domains
> accounts that are members 'ARE NOT' showing up like this,
> domain\account
>
> Instead, they show up as a long string of numbers, then it indicates that
> it is not resolved properly. Please check with Windows 2000 newsgroups to
> see if they have any suggestions.
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> Regards,
>
> Bill Cheng
> Microsoft Support Engineer
>
> Thanks
> Hari
> "James" <See.My.Sig@.The.Bottom.com> wrote in message
> news:s1wIe.13389$Bx5.11303@.trnddc09...
>> how come when i try to add a domain user/group i get this error:
>> Error 15401: Windows NT user or group 'MYDOMAIN\Domain Users' not found.
>> Check the name again.
>>
>>
>

How come i can't add a domain user?

how come when i try to add a domain user/group i get this error:
Error 15401: Windows NT user or group 'MYDOMAIN\Domain Users' not found.
Check the name again.Hi,
See the reply from Bill from a old postregarding the same issue.
Hi Biva,
I see this is a complex problem as usually the suggestions should work.
The Enterprise Manager will use sp_grantlogin to grant permissions. When we
use sp_grantlogin to grant the permissions to a NT User, the stored
procedure calls
LookupAccountSid function and that function looks in the SID cache on the
local
computer before it goes to a domain controller. If the SID in the cache is
incorrect, then the problem would occur. This problem may occur if we
rename the User account. As far as I know, the only method is to reboot the
computer. However, you may check with Windows 2000 newsgroups for
suggestions, e.g. microsoft.public.win2000.gener_al,
microsoft.public.win2000.activ_e_directory.
In addition, this indicates that domain names are not resolved properly.
Please check in Administators Group in Computer Management. If domains
accounts that are members 'ARE NOT' showing up like this,
domain\account
Instead, they show up as a long string of numbers, then it indicates that
it is not resolved properly. Please check with Windows 2000 newsgroups to
see if they have any suggestions.
This posting is provided "AS IS" with no warranties, and confers no rights.
Regards,
Bill Cheng
Microsoft Support Engineer
Thanks
Hari
"James" <See.My.Sig@.The.Bottom.com> wrote in message
news:s1wIe.13389$Bx5.11303@.trnddc09...
> how come when i try to add a domain user/group i get this error:
> Error 15401: Windows NT user or group 'MYDOMAIN\Domain Users' not found.
> Check the name again.
>
>|||thank you, i found my problem tho, i needed to apply ISA 2004 standard
server's service pack 1. ISA doesn't like win2003's sp1... isa's firewall
was stoping rpc.
"Hari Prasad" <hari_prasad_k@.hotmail.com> wrote in message
news:OTxmREUmFHA.2852@.TK2MSFTNGP15.phx.gbl...
> Hi,
> See the reply from Bill from a old postregarding the same issue.
> Hi Biva,
>
> I see this is a complex problem as usually the suggestions should work.
>
> The Enterprise Manager will use sp_grantlogin to grant permissions. When
> we
> use sp_grantlogin to grant the permissions to a NT User, the stored
> procedure calls
> LookupAccountSid function and that function looks in the SID cache on the
> local
> computer before it goes to a domain controller. If the SID in the cache is
> incorrect, then the problem would occur. This problem may occur if we
> rename the User account. As far as I know, the only method is to reboot
> the
> computer. However, you may check with Windows 2000 newsgroups for
> suggestions, e.g. microsoft.public.win2000.gener_al,
> microsoft.public.win2000.activ_e_directory.
>
> In addition, this indicates that domain names are not resolved properly.
> Please check in Administators Group in Computer Management. If domains
> accounts that are members 'ARE NOT' showing up like this,
> domain\account
>
> Instead, they show up as a long string of numbers, then it indicates that
> it is not resolved properly. Please check with Windows 2000 newsgroups to
> see if they have any suggestions.
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> Regards,
>
> Bill Cheng
> Microsoft Support Engineer
>
> Thanks
> Hari
> "James" <See.My.Sig@.The.Bottom.com> wrote in message
> news:s1wIe.13389$Bx5.11303@.trnddc09...
>

How come i can't add a domain user?

how come when i try to add a domain user/group i get this error:
Error 15401: Windows NT user or group 'MYDOMAIN\Domain Users' not found.
Check the name again.
Hi,
See the reply from Bill from a old postregarding the same issue.
Hi Biva,
I see this is a complex problem as usually the suggestions should work.
The Enterprise Manager will use sp_grantlogin to grant permissions. When we
use sp_grantlogin to grant the permissions to a NT User, the stored
procedure calls
LookupAccountSid function and that function looks in the SID cache on the
local
computer before it goes to a domain controller. If the SID in the cache is
incorrect, then the problem would occur. This problem may occur if we
rename the User account. As far as I know, the only method is to reboot the
computer. However, you may check with Windows 2000 newsgroups for
suggestions, e.g. microsoft.public.win2000.generXal,
microsoft.public.win2000.activXe_directory.
In addition, this indicates that domain names are not resolved properly.
Please check in Administators Group in Computer Management. If domains
accounts that are members 'ARE NOT' showing up like this,
domain\account
Instead, they show up as a long string of numbers, then it indicates that
it is not resolved properly. Please check with Windows 2000 newsgroups to
see if they have any suggestions.
This posting is provided "AS IS" with no warranties, and confers no rights.
Regards,
Bill Cheng
Microsoft Support Engineer
Thanks
Hari
"James" <See.My.Sig@.The.Bottom.com> wrote in message
news:s1wIe.13389$Bx5.11303@.trnddc09...
> how come when i try to add a domain user/group i get this error:
> Error 15401: Windows NT user or group 'MYDOMAIN\Domain Users' not found.
> Check the name again.
>
>
|||thank you, i found my problem tho, i needed to apply ISA 2004 standard
server's service pack 1. isa doesn't like win2003's sp1... isa's firewall
was stoping rpc.
"Hari Prasad" <hari_prasad_k@.hotmail.com> wrote in message
news:OTxmREUmFHA.2852@.TK2MSFTNGP15.phx.gbl...
> Hi,
> See the reply from Bill from a old postregarding the same issue.
> Hi Biva,
>
> I see this is a complex problem as usually the suggestions should work.
>
> The Enterprise Manager will use sp_grantlogin to grant permissions. When
> we
> use sp_grantlogin to grant the permissions to a NT User, the stored
> procedure calls
> LookupAccountSid function and that function looks in the SID cache on the
> local
> computer before it goes to a domain controller. If the SID in the cache is
> incorrect, then the problem would occur. This problem may occur if we
> rename the User account. As far as I know, the only method is to reboot
> the
> computer. However, you may check with Windows 2000 newsgroups for
> suggestions, e.g. microsoft.public.win2000.generXal,
> microsoft.public.win2000.activXe_directory.
>
> In addition, this indicates that domain names are not resolved properly.
> Please check in Administators Group in Computer Management. If domains
> accounts that are members 'ARE NOT' showing up like this,
> domain\account
>
> Instead, they show up as a long string of numbers, then it indicates that
> it is not resolved properly. Please check with Windows 2000 newsgroups to
> see if they have any suggestions.
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> Regards,
>
> Bill Cheng
> Microsoft Support Engineer
>
> Thanks
> Hari
> "James" <See.My.Sig@.The.Bottom.com> wrote in message
> news:s1wIe.13389$Bx5.11303@.trnddc09...
>