NT Group Membership 
Author Message
 NT Group Membership
In SS7, I know IS_MEMBER indicates whether a user is a member of a
specified NT group. But what I would like is to know the name of the NT
group to which the current user belongs - without knowing all the
possible groups ahead of time. I know that a user can belong to many NT
groups simultaneously - so perhaps T-SQL provides a way to know which
one permitted NT authentication?

Thanks in advance

Jeff



Mon, 06 Sep 2004 09:12:39 GMT
 NT Group Membership

Hi ,

In regards to your question, I give you the following suggestion:
Before the NT Group is add to Sql Server Logins, the function "Is_Member"
will never be able to detect whether current user is a member of certain NT
Group.

In the login process, if the user uses Windows Authentication to connect to
Sql Server, Sql Server will be able to confirm whether the user account
exists in Sql Server Logins, also Sql Server will be able to confirm
whether the NT Group the user account belongs to exists in Sql Server at
the same time.

After login, Sql Server will assign you all the permissions that your
account and groups own.

So if you want to detect all the group informations, you should add all
Window NT Groups to Sql Server Logins at first.
After that you can use sp_helpntgroup to view all groups in Sql Server
Logins.

Please let me know if this resolves your problem or if you have additional
questions.  

I look forward to hearing from you.

Connor Liu
Microsoft Partner Support

This posting is provided 'AS IS' with no warranties, and confers no rights.
Get Secure! - www.microsoft.com/security
----------------------------------



Tue, 07 Sep 2004 17:25:59 GMT
 
 [ 2 post ] 

 Relevant Pages 

1. Getting NT group membership from TSQL

2. NT Group Membership from SQL Server

3. NT Group membership enumeration.

4. NT Group membership enumeration.

5. Verifying NT Username and Group Membership

6. ldap query to resolve group membership in AD

7. "OLAP Administrators" Group Membership

8. Group Membership

9. permit via group membership

10. via group membership

11. Query LDAP user group membership frmo SQL Server

12. Group Membership


 
Powered by phpBB® Forum Software