Cannot login as user even though their group has access

[Ian Dawson]

Hi,

I'm having problems figuring out how to login to SQL Server using Windows
Authentication.

What I did is as follows. (All this is on the one machine btw.)

Created an NT user called "User1" and added him to a group called
"SQLServerUsers"
Opened up enterprise manager, logged into the SQLServer.
In Security created a new windows authenticated login which was the group
SQLServerUsers.

Now if I try to connect to the SQL server as the new user (User1) it fails.
The error message is
"[Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user
'MYSERVERNAME\User1'."

If I try to connect to enterprise manager when logged in as this user I get
"Connection failed, check SQL Server Registration Properties"

Even if I give the SQLServerUsers login all the top dog permissions it still
fails when I'm this user. The only way I can connect as this user is to
either make them an "Administrator", or create a login in enterprise manager
for just this user.

I was under the impression that if a user is a member of a group, and that
group has certain permissions in sql server, the users of this group would
inherit these permissions. But I guess not.

Any ideas what I'm doing wrong?

Thanks

Ian

[Sue Hoegemeier]

Yes, user do inherit the access/permissions of groups they
are members of. One situation where the login would be
denied is if they are a member of any other groups that are
denied access. Deny always takes precedence.

-Sue

[Ian Dawson]

Hi Sue,

Thanks for the reply. It's weird, I've just tried it on another machine,
same setup and it works ok.
The user on the first machine is only a member of the 1 group so I'm not
sure why that isn't working. Perhaps my machines ill.

Cheers

Ian

"Sue Hoegemeier" <Su...@nomail.please> wrote in message
news:00s2du423itrjtaj8...@4ax.com...