Accessing Active Directory using SQL Server 2000

Hello All,

I have a linked ADSI Server to our company Active Directory and
everything is fine. I'm running queries and such using LDAP. BUT how
can I aquire a list of attributes for the classes and categories. Such
as if i wanted to see a user's telephone number and email address for
use in a corporate database? Is this possible?

ThanksHi

I have never tried this.. but...:

The example of ADSI in books online returns the SN and ST attributes of the
contact class. See Books Online:

mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\acd
ata.chm::/ac_8_qd_12_94fn.htm

You should then be able to use the same OPENQUERY as the destination of the
update statement. See Books Online:
mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\tsq
lref.chm::/ts_oa-oz_5xix.htm

John

"Brandon Arnold" <btugg@.yahoo.com> wrote in message
news:8508d156.0312301444.b04f4c8@.posting.google.co m...
> Hello All,
> I have a linked ADSI Server to our company Active Directory and
> everything is fine. I'm running queries and such using LDAP. BUT how
> can I aquire a list of attributes for the classes and categories. Such
> as if i wanted to see a user's telephone number and email address for
> use in a corporate database? Is this possible?
> Thanks|||Thanks John but I'm looking a little deeper than that.

While searching yesterday I ran across another attribute that is
usually shown
in sample LDAP queries and it was "sAMAccountNAme" which is the
account a user may log on with. I'm for a list of attributes for
Computers, People, etc in Active Directory. Is there such a list or
definition table?

"John Bell" <jbellnewsposts@.hotmail.com> wrote in message news:<ibyIb.2549$le.23310381@.news-text.cableinet.net>...
> Hi
> I have never tried this.. but...:
> The example of ADSI in books online returns the SN and ST attributes of the
> contact class. See Books Online:
> mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\acd
> ata.chm::/ac_8_qd_12_94fn.htm
> You should then be able to use the same OPENQUERY as the destination of the
> update statement. See Books Online:
> mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\tsq
> lref.chm::/ts_oa-oz_5xix.htm
> John
> "Brandon Arnold" <btugg@.yahoo.com> wrote in message
> news:8508d156.0312301444.b04f4c8@.posting.google.co m...
> > Hello All,
> > I have a linked ADSI Server to our company Active Directory and
> > everything is fine. I'm running queries and such using LDAP. BUT how
> > can I aquire a list of attributes for the classes and categories. Such
> > as if i wanted to see a user's telephone number and email address for
> > use in a corporate database? Is this possible?
> > Thanks|||As in ?:
http://msdn.microsoft.com/library/d...ace_mapping.asp

John

"Brandon Arnold" <btugg@.yahoo.com> wrote in message
news:8508d156.0312310700.647abcfb@.posting.google.c om...
> Thanks John but I'm looking a little deeper than that.
> While searching yesterday I ran across another attribute that is
> usually shown
> in sample LDAP queries and it was "sAMAccountNAme" which is the
> account a user may log on with. I'm for a list of attributes for
> Computers, People, etc in Active Directory. Is there such a list or
> definition table?
> "John Bell" <jbellnewsposts@.hotmail.com> wrote in message
news:<ibyIb.2549$le.23310381@.news-text.cableinet.net>...
> > Hi
> > I have never tried this.. but...:
> > The example of ADSI in books online returns the SN and ST attributes of
the
> > contact class. See Books Online:
mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\acd
> > ata.chm::/ac_8_qd_12_94fn.htm
> > You should then be able to use the same OPENQUERY as the destination of
the
> > update statement. See Books Online:
mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\tsq
> > lref.chm::/ts_oa-oz_5xix.htm
> > John
> > "Brandon Arnold" <btugg@.yahoo.com> wrote in message
> > news:8508d156.0312301444.b04f4c8@.posting.google.co m...
> > > Hello All,
> > > > I have a linked ADSI Server to our company Active Directory and
> > > everything is fine. I'm running queries and such using LDAP. BUT how
> > > can I aquire a list of attributes for the classes and categories. Such
> > > as if i wanted to see a user's telephone number and email address for
> > > use in a corporate database? Is this possible?
> > > > Thanks|||Yes! Thanks John!
"John Bell" <jbellnewsposts@.hotmail.com> wrote in message news:<L_TIb.3630$5X.31045680@.news-text.cableinet.net>...
> As in ?:
> http://msdn.microsoft.com/library/d...ace_mapping.asp
> John
> "Brandon Arnold" <btugg@.yahoo.com> wrote in message
> news:8508d156.0312310700.647abcfb@.posting.google.c om...
> > Thanks John but I'm looking a little deeper than that.
> > While searching yesterday I ran across another attribute that is
> > usually shown
> > in sample LDAP queries and it was "sAMAccountNAme" which is the
> > account a user may log on with. I'm for a list of attributes for
> > Computers, People, etc in Active Directory. Is there such a list or
> > definition table?
> > "John Bell" <jbellnewsposts@.hotmail.com> wrote in message
> news:<ibyIb.2549$le.23310381@.news-text.cableinet.net>...
> > > Hi
> > > > I have never tried this.. but...:
> > > > The example of ADSI in books online returns the SN and ST attributes of
> the
> > > contact class. See Books Online:
> > > mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\acd
> > > ata.chm::/ac_8_qd_12_94fn.htm
> > > > You should then be able to use the same OPENQUERY as the destination of
> the
> > > update statement. See Books Online:
> > mk:@.MSITStore:C:\Program%20Files\Microsoft%20SQL%2 0Server\80\Tools\Books\tsq
> > > lref.chm::/ts_oa-oz_5xix.htm
> > > > John
> > > > "Brandon Arnold" <btugg@.yahoo.com> wrote in message
> > > news:8508d156.0312301444.b04f4c8@.posting.google.co m...
> > > > Hello All,
> > > > > > I have a linked ADSI Server to our company Active Directory and
> > > > everything is fine. I'm running queries and such using LDAP. BUT how
> > > > can I aquire a list of attributes for the classes and categories. Such
> > > > as if i wanted to see a user's telephone number and email address for
> > > > use in a corporate database? Is this possible?
> > > > > > Thanks

Access SQL Server from Stand-Alone PC with Windows Authentication

I have a PC that is not joined to the domain. I want to be able to access
our SQL Server from it, but it is my active directory domain account that ha
s
access. How can I gain access to the SQL Server via Enterprise Manager or
Query Analyzer?Hello,
If the machine is in a workgroup, SQL server machine is in the domain, make
sure you can ping the SQL server machine from the machine you log on
successfully via IP address or machine name.
Create a same Local user account both on the machine and the SQL server
machine. The Local user account and password on both machines need to be
same . On the SQL server machine, add the Local user account as the SQL
server logins and grant the user right to access the database. By doing so,
you can access the SQL server via Query Analyzer with Windows
authentication.
Or you can access the SQL server using a SQL logins via Query Analyzer with
SQL authentication.
I hope the information is helpful.
Sophie Guo
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
========================================
=============
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.

Access permissions in RS

I was wondering if is posible to set user to view certain reports only, using the active directory user credential. example user 1 can view 3 reports, user 2 can view 5 reports admin user can view all......etc.

I would set up groups on your Active Directory, and then assign people to those groups. Once you have all that set up, you can assign report permissions to certain groups only.

Access Issue in in 2005

I have some software that connects to SQL Server using Integrated Security in my connection string. My users are members of an active directory group. In SQL Server 2005, I've added the AD group to Logins, checked the User Mapping for the database, and checked role memberships db_datareader, db_datawriter and public.

When I look at Properties->Permissions of the database, the AD group is listed under Users or roles. I checked Connect, Execute, Select, Insert and Update are checked.

The users in the AD group still cannot access the data. 2 questions:

-Is there a log that will tell me why they're getting blocked?

-Is there a better way to give access to a new group of people?

Thanks!

Brian

I think you're going down the right route adding the user to pre defined roles. However, can you clarify whether users of the group are able to login to the SQL Server or do they just have permission denied on the objects within the specific database? What message do you receive back when one of these users attempts to login and read the data?

|||

>> What message do you receive back when one of these users attempts to login and read the data?

I was attempting to answer this question (by adding better exception handling) when things started working. The last thing I did in SQL Server was checked the SELECT and INSERT boxes under the role. I didn't think it fixed the problem because the app still crashed, but there must have been a problem in the code that I fixed too.

Thanks!

Brian