Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

domain group login can't login

2 views
Skip to first unread message

Dubh

unread,
Apr 20, 2010, 7:44:01 PM4/20/10
to
sql 2008 sp1

domain user [Domain\SpecificUser] is a member of domain group
[Domain\SomeGroup].

If I add a login for [Domain\SpecificUser] with the proper security settings
on databases everything works correctly. If I add login for
[Domain\SomeGroup] with the same settings I get... Error: 18456, Severity:
14, State: 11. Login failed for user 'Domain\SpecificUser'. Reason:
Token-based server access validation failed with an infrastructure error.
Check for previous errors. [CLIENT: <named pipe>]

Any thoughts? I need to use groups instead of users!

Rick Byham, MSFT

unread,
Apr 21, 2010, 11:42:36 AM4/21/10
to
State 11 indicates: Login is valid, but server access failed.
This is a typical message provided to the client when they don't have
permission to get more specific information. So check the SQL Server Error
log for more information.
For example, I was able to generate error 18456, state 11, by setting the
default database for the group to a database that the group did not have
access to.
But the SQL Server Error log had the underlying error.
--
Rick Byham, MSFT
(Implies no warranty or rights)


"Dubh" <Du...@discussions.microsoft.com> wrote in message
news:B50B3C32-1FF5-4F63...@microsoft.com...

Dubh

unread,
Apr 21, 2010, 8:19:01 PM4/21/10
to
The only problem here is the machine i was using to test the logon has
something wrong with it. No clue what, it works fine from other machines!

Erland Sommarskog

unread,
Apr 22, 2010, 5:25:14 PM4/22/10
to
Dubh (Du...@discussions.microsoft.com) writes:
> The only problem here is the machine i was using to test the logon has
> something wrong with it. No clue what, it works fine from other machines!

When that happens, it's usually some problem with the machine in the AD
or somesuch outside SQL Server. No, I have no clue what that might be.
But maybe dropping it and readding it from the AD. Or reinstall/repair
Windows on the machine.

--
Erland Sommarskog, SQL Server MVP, esq...@sommarskog.se

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

0 new messages