Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Administration
 SQL 08R2 on domain controller

Author  Topic 

Michael Gray
Starting Member

3 Posts

Posted - 2010-12-28 : 16:28:27
In SQL 2005 or 2008, when installed on a domain controller, there were security groups created in Active Directory. If the server wasn't a DC, the group would exist in Local Groups. I've been able to add other users or groups as members to the SQL security groups to allow users accesss to databases upon their creation.

With SQL 2008R2, on a DC the group I'm looking for doesn't seem to exist.

What I need to do is a way to grant certain users or groups full control of databases upon their creation.

Any thoughts?

Thanks!

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2010-12-28 : 16:42:46
I don't understand why you'd have an implementation where SQL was installed on the domain controller, but to answer your question you just provide db_owner database role.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

Michael Gray
Starting Member

3 Posts

Posted - 2010-12-28 : 16:46:33
I'm troubleshooting someone else's environment :-)

Thanks, I'll try your suggestion!
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2010-12-28 : 16:47:49
You're welcome, glad to help.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

Michael Gray
Starting Member

3 Posts

Posted - 2010-12-29 : 14:38:22
Still having problems, I made the changes but have not had the opportunity to bounce services or reboot (unsure if that's even necessary)...and I might have explained further at the get go.

The application requires the attached DB (mdf/ldf) be visibile via a mapped drive. Right now, upon creation there's three groups that by default have full control of the .mdf and .ldf. They are Domain Admins, MSSQL$<instance name>, and Owner Rights. If I add the user group to the files by hand, it all works.
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2010-12-29 : 14:41:48
Bouncing is unnecessary.

I'm not up to speed on the permissions that are needed at the file level when the database is attached from a mapped drive, so I can't help out there. But it seems you have a workaround in place already if adding the user group to the files by hand works.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page
   

- Advertisement -