AD migration and SQL server logins.

Our SQL 2000 servers use Windows authentication. My question pertains to th
e
effect an AD migration has on SQL logins.
After the NT4 user accounts and groups are migrated to the AD domain and the
SQL server is upgraded to the AD domain, do the SQL logins automatically
reference the new user accounts in AD? If not do I have to manually add the
AD users and groups to SQL login and access to the databases? Or are there
tools available?You should not have to manually add the account again to SQL Server if your
network administrator choose to migrate the accounts with sid history. If
the accounts do not use sid history then you will need to add the accounts
back into SQL Server. I beleive one of the stored procedures you could use
is sp_sidmap.
"anthonyp" wrote:

> Our SQL 2000 servers use Windows authentication. My question pertains to
the
> effect an AD migration has on SQL logins.
> After the NT4 user accounts and groups are migrated to the AD domain and t
he
> SQL server is upgraded to the AD domain, do the SQL logins automatically
> reference the new user accounts in AD? If not do I have to manually add t
he
> AD users and groups to SQL login and access to the databases? Or are ther
e
> tools available?

AD Groups

Our customer is using Windows Authentication to connect to SQL 2000. They
added their Active Directory group to the SQL logins but can not connect to
SQL 2000. For a test they added the individual domain user to an SQL login
and they can connect. For some reason they can not use their AD group to
connect to SQL 2000. Then they added local admin privledge to the AD group
and they can now connect. Do you have to have local admin privledge on an A
D
group to connet to SQL 2000? How can they remove that privledge and still
connect with thier AD group SQL login'
Thanks
RyanHi,
please refer following links :
www.sqlservercentral.com/forums/shw...and-SQL-2K.html
www.flatmtn.com/computer/Linux-LDAP.html
www.windowsitpro.com/SQLServer/Arti...841/pg/2/2.html
www.openldap.org/lists/openldap-sof...0/msg00304.html
http://forums.devshed.com/archive/t...s-ms-sql-server
:-)
Regards
Andy Davis
Activecrypt Team
---SQL Server Encryption Software
http://www.activecrypt.com
"Ryan" wrote:

> Our customer is using Windows Authentication to connect to SQL 2000. They
> added their Active Directory group to the SQL logins but can not connect t
o
> SQL 2000. For a test they added the individual domain user to an SQL logi
n
> and they can connect. For some reason they can not use their AD group to
> connect to SQL 2000. Then they added local admin privledge to the AD grou
p
> and they can now connect. Do you have to have local admin privledge on an
AD
> group to connet to SQL 2000? How can they remove that privledge and still
> connect with thier AD group SQL login'
> Thanks
> Ryan