Domains and SQL

[Andrew]

Hey all,
I need your help again..We are having many domains. Actually
we have created SQLgroups in sql and granted permissions in our domain.
But guys from other domains are just entering into their query analyser
and accessing the sql server..They are not at all falling under our SQLgroups.
We have given trusted connections between domains..
My question here is
Is there anyway that there should be an option to select the domain
before they log in thru query analyser? Like Nobody should enter
from their domain ...only through our domain they should enter..?
Please help me out..

Thank you
Andrew.s

[Gary Andrews]

I'll try to help, but my knowledge in this area is limited.

Do you have a "guest" account in your SQL Server? If so, then delete it and see
if your problem has been solved. At this point, using "trusted" domains, the only
individuals who should be able to login to your SQL Server are NT logins specifically
defined in your SQL Server, under the security folder in EM or NT logins associated with
a specific NT group definition. (and that group definition is defined in your SQL
server, under the security folder in EM).

HTHs Gary


------------
Andrew at 11/7/00 1:07:42 PM

Hey all,
I need your help again..We are having many domains. Actually
we have created SQLgroups in sql and granted permissions in our domain.
But guys from other domains are just entering into their query analyser
and accessing the sql server..They are not at all falling under our SQLgroups.
We have given trusted connections between domains..
My question here is
Is there anyway that there should be an option to select the domain
before they log in thru query analyser? Like Nobody should enter
from their domain ...only through our domain they should enter..?
Please help me out..

Thank you
Andrew.s

[Gary Andrews]

Will attempt to correct some mis-information.

The guest account is associated with a database. So you may have to check all
your databases to see if they have a guest account.

You probably should read all you can in BOL about the guest account. Following is
from BOL:

For example, if a server contains a personnel database and a recruiting database,
users who should be able to access the recruiting database but not the personnel database
would have a user account created only in the recruiting database.

The user account in each database is used to apply security permissions for the objects
(tables, views, stored procedures and so on) in that database. This user account can be
mapped from Microsoft Windows NT® user accounts, Windows NT groups in which the user
is a member, or SQL Server login accounts. If there is no account mapped directly, the user
may be allowed to work in a database under the guest account, if one exists. The activities
a user is allowed to perform are controlled by the permissions applied to the user account
used to gain access to a database.


------------
Andrew at 11/7/00 1:07:42 PM

Hey all,
I need your help again..We are having many domains. Actually
we have created SQLgroups in sql and granted permissions in our domain.
But guys from other domains are just entering into their query analyser
and accessing the sql server..They are not at all falling under our SQLgroups.
We have given trusted connections between domains..
My question here is
Is there anyway that there should be an option to select the domain
before they log in thru query analyser? Like Nobody should enter
from their domain ...only through our domain they should enter..?
Please help me out..

Thank you
Andrew.s