may have some orphaned logins..Deny not working


i have user 'domain\john' can logon sql server today . know belongs few groups has database reader/writer access don't see him belong sysadmin related groups.. i wondering if there created while may still sticking around.. tried deny access login can still logon. using sql 2005.. don't know how track down although looked @ other groups have sysadmin role , not exist there.. did mention few years ago, domain admins.. anyways, cannot seem him denied access sql server... :-(

anything can run/do check may going wrong ?

hi,

you try using xp_logininfo find users permission path, i.e. xp_logininfo 'domain\user'

do still have builtin\administrators part of sysadmin fixed server role?  is local administrator on server, or member of domain group that's in servers' local administrator group?  this give him sysadmin rights. 


thanks,

andrew bainbridge
sql server dba

please click "propose answer" if post solves problem, or "vote helpful" if post has been useful you


SQL Server  >  SQL Server Database Engine



Comments

Post a Comment

Popular posts from this blog

SQL server replication error Cannot find the dbo or user defined function........

hi there, i ran problem while deploying sql 2008 transactional replication between 2 servers lets assume server , b. actually created  both distributor , publisher on server , after created subscriber pointed server b, launch replication monitor , found big red cross. when click on tab "distributor subscriber history" error says "cannot find either column "dbo" or user defined-function or aggregate "dbo.ufnleadingzeros", or name ambiguous". can body regarding issue. regards, ishuv hi, you need compare data , others reseved, index size, unused should not compared. differs. here server - data - 87896 kb server b - data - 78152 kb server data size includes publication tables, can't compare directly. need check article article know exact data size. SQL Server  >  ...
Read more

BIT Version

  hi,     knows how find out ther bit version in sql  , windows os (32 or 64)   regards, s.balavenkatesh   microsoft sql server 2005 - 9.00.1399.06 (intel x86) oct 14 2005 00:33:37 copyright (c) 1988-2005 microsoft corporation standard edition on windows nt 5.2 (build 3790: service pack 2)     intel x86)   -- says sql server 32 bit   madhu SQL Server  >  SQL Server Tools
Read more

Admin Permissions

hi need create new 'role' following permissions, 1. access sql server logs. 2. access maintenance plans ( can avoid access) 3. access activity monitor 4. normal access product databases , not system db´s need guidance on how it, can point me in right direction please? thanks 1.grant  execute on xp_readerrorlog [domainname\ad user or group]; 2. http://technet.microsoft.com/en-us/library/ms191002.aspx 3.view server state permission 4. make user member of dbo_owner database role. best regards,uri dimant sql server mvp, http://sqlblog.com/blogs/uri_dimant/ ms sql optimization: ms sql development , optimization ms sql consulting: large scale of database , data cleansing remote dba services: improves ms sql database performance sql server integration services: business intelligence SQL Server  >  ...
Read more