may have some orphaned logins..Deny not working


i have user 'domain\john' can logon sql server today . know belongs few groups has database reader/writer access don't see him belong sysadmin related groups.. i wondering if there created while may still sticking around.. tried deny access login can still logon. using sql 2005.. don't know how track down although looked @ other groups have sysadmin role , not exist there.. did mention few years ago, domain admins.. anyways, cannot seem him denied access sql server... :-(

anything can run/do check may going wrong ?

hi,

you try using xp_logininfo find users permission path, i.e. xp_logininfo 'domain\user'

do still have builtin\administrators part of sysadmin fixed server role?  is local administrator on server, or member of domain group that's in servers' local administrator group?  this give him sysadmin rights. 



thanks,

andrew bainbridge
sql server dba

please click "propose answer" if post solves problem, or "vote helpful" if post has been useful you


SQL Server  >  SQL Server Database Engine



Comments

Popular posts from this blog

Conditional formatting a graph vertical axis in SSRS 2012 charts

Register with Power BI failed

SQL server replication error Cannot find the dbo or user defined function........