Comments for Business and Information Technology Tangents

Comment on SQL Server 2008 Security Permissions – Windows / Active Directory Authentication Issues by brentblawat

brentblawat — Fri, 27 Apr 2012 21:02:22 +0000

David — Thank you for your comment and great suggestion!

Comment on SQL Server 2008 Security Permissions – Windows / Active Directory Authentication Issues by David Lathrop

David Lathrop — Fri, 27 Apr 2012 19:42:20 +0000

Ben,

You can use the following command to “fix” a SQL login to match the AD name with the same SID:
ALTER LOGIN [domain\oldname] WITH NAME = [domain\newname] ;
Do the same, except ALTER USER … in each database to fix the database users.

SQL Server will not let you change the name of a Windows authenticated login/user to anything but the current AD name.

Comment on 2010 Volkswagen CC Review – A test Drive Bashing by brentblawat

brentblawat — Tue, 20 Mar 2012 15:22:41 +0000

Dave,

I did have an axe to grind with VW over their initial design of their vehicle. They missed the mark on so many items it was truly disappointing. When you compare the Passat CC redesign against the Ford Taurus SHO redesign, they only made major exterior styling changes to the vehicle. (versus the SHO which added the ECO Boost 345hp engine) The interior was the same, the engines are the same, suspension, transmission etc… etc… I was really disappointed how such a sexy looking car could have missed the mark. Honestly I was hoping that my feedback would have provided VW points to improve in their subsequent models. They are SO close to having the mixture right on the vehicle. I do want to be clear I LOVE the exterior of the car but I really expected more out of this German vehicle.

Das Auto.

-Brenton

Comment on 2010 Volkswagen CC Review – A test Drive Bashing by Dave

Dave — Fri, 09 Mar 2012 20:47:57 +0000

My CC is an awesome car. I’ll admit it’s not for everyone, but it is a great blend of performance and elan for the price. The 3d Nav is super cool, the radio rocks a 30 gig hard drive to load with music or videos, and the car turns heads wherever I roam with it.
The reviewer seems to have an axe to grind with VW. Whatever. This car is sweet.

Comment on SQL Server 2008 Security Permissions – Windows / Active Directory Authentication Issues by brentblawat

brentblawat — Wed, 04 Jan 2012 17:37:36 +0000

Correction: Use the Query: select * from sys.syslogins

Comment on SQL Server 2008 Security Permissions – Windows / Active Directory Authentication Issues by brentblawat

brentblawat — Wed, 04 Jan 2012 17:30:27 +0000

Ben – Sounds like there is something else going on. SQL Server 2008 has a pretty strict security model where it leverages LDAP (or Kerberos) to access to domain controller for security (re)authentication. If you sign into the server using a User, SQL Server will authenticate against active directory. Credential caching doesn’t exist with SQL Server 2008. The other option is that the user you are referring to is part of an additional group or has an individual login for that user.

I would run the query: select * from sys.sysusers

I would then take a look at the SID for Group and match it to that of the Group in Active Directory. I would bet they would be the same if you can authenticate with Users within that group.

If they don’t match, I would suggest ‘turning on Mixed Mode Authentication’ if it has not been done yet. Sign in as ‘SA’ and remove and readd the approperiate group.

Let me know if this addresses your issue or if you need further help with this.

Happy Coding

-Brenton

Comment on SQL Server 2008 Security Permissions – Windows / Active Directory Authentication Issues by Ben

Ben — Wed, 04 Jan 2012 16:38:24 +0000

A circumstance that I just ran across, is that when using windows authentication if the name of an active directory group that has access to a database in SQL Server is changed, the SQL still remains the same and access still works correctly. I found that if I tried to create a login for the new group name and the old one was still setup I would get the error that the server principle already exists. After reading this I believe that is because the AD Group was renamed and the SID did not change. Does anyone know if there is a way to update the SQL Server logins with the new names from the AD without deleting and recreating them?

Comment on SQL Server 2008 Security Permissions – Windows / Active Directory Authentication Issues by none

none — Wed, 02 Nov 2011 20:48:46 +0000

Thank-you for this tidbit:
5: import-module activedirectory

Comment on Powershell Import-GPO : The Data Is Invalid Fixed by brentblawat

brentblawat — Tue, 11 Oct 2011 13:57:37 +0000

Thanks for the comment!

Comment on Powershell Import-GPO : The Data Is Invalid Fixed by Box293

Box293 — Tue, 11 Oct 2011 01:46:20 +0000

I came across the same error when using the Copy-GPO command. It turns out that my .migtable file did not have enough entries. My source GPO has lots of folder redirections and my .migtable file did not have an entry for the Downloads redirection. Once I added that entry everthing worked fine.