FIX: No Information Returned by xp_logininfoID: Q155556
|
The extended stored procedure XP_LOGININFO reports the privilege
level and the permission path by which a Windows NT user account has
access to SQL Server. However, for a domain user (for example,
Domain\SQLUser) belonging to a global group (for example, SQLGlobal),
"xp_logininfo SQLUser" doesn't return any information if "SQLUser" is
granted user level privilege through this global group (xp_grantlogin
'Domain\SQLGlobal', 'user'). Similarly, if the global group is added as a
member of a local group (for example, SQLLocal) on the Windows NT server
where SQL Server resides and user level privilege is granted to "SQLUser"
through the local group "SQLLocal" (xp_grantlogin sqllocal, 'user'),
'xp_logininfo SQLUser' does not return any information either.
In both cases, searching the user's permission path in security
manager to "verify permissions for account" and "Find all
permissions for account" does not return any information.
In Windows NT User Manager for Domain, add domain users directly to a local group. You should now be able to grant this group user-level privilege through SQL Security Manager or xp_grantlogin.
Microsoft has confirmed this to be a problem in SQL Server
version 6.5. This problem has been corrected in U.S. Service Pack 5a
for Microsoft SQL Server version 6.5. For information about
downloading and installing the latest SQL Server Service Pack, see
http://support.microsoft.com/support/sql/.
For more information, contact your primary support provider.
As a side effect of this problem, all SQL Server logins created for Windows NT users granted access through a global group (SQLGlobal above) will show as orphaned logins in Security Manager under Security/Search/Find orphan SQL Login IDs.
Additional query words: prodsqlIntegrated Security
Keywords : kbnetwork SSrvGen SSrvLAN kbbug6.50 kbfix6.50.SP5
Version : winnt:6.5
Platform : winnt
Issue type : kbbug Last Reviewed: April 21, 1999