is it possible to connect to SQL Express without network?

I have notebook, client server application and sql express sp2 on this notebook.

Also, I know domain user login/password,

but I don't know any local user name/password

and I don't know any sql server user name/password.

Domain user is not a local administrator on this notebook.

When notebook connected to the office LAN I am working good with my app-> my sql express as a domain/user.

I'd like to work at home too. I can logon to the system (XP SP2) using domain account when notebook has no network connection. (probably OS caches something)

Is it possible to work with sql express using domain login when no network connection?

PS. old version of this software used MSDE 2000 and it was possible(!).

Thank you.

Yes. SQL Server will still work the same as when you are connected to the office LAN.

Since you log on with your domain credentials (they are cachd on the laptop), the same credentials are used to gain entry to SQL Server.

|||

Arnie Rowland wrote:

Yes. SQL Server will still work the same as when you are connected to the office LAN.

Since you log on with your domain credentials (they are cachd on the laptop), the same credentials are used to gain entry to SQL Server.

Ok, thank you.

I did experiment on 2 workstations.

On one machine ist working good, but on the second machine (no netowrk connection) when I tried to connect to the sql server I have a problem:

SSMS is ocnnecting ok

Application gives me message: cannot generate SSPI context.

What can it be? ...

Thank you

|||

Check these souces:

Error -Cannot generate SSPI context
http://support.microsoft.com/Default.aspx?id=811889
http://support.microsoft.com/kb/827422/en-us
http://support.microsoft.com/kb/843248/en-us
http://support.microsoft.com/kb/269541/en-us
http://support.microsoft.com/kb/267588/en-us
http://support.microsoft.com/kb/814401/en-us
http://support.microsoft.com/kb/818173/en-us

sql

Is it possible ?

Hi
I have users in domain group who use application which uses sqlserve, they
have rights to insert, update, delete. I want some of the members of this
domain group to connect directly to the database using query analyzer but
with right only to read and they still of course can use application and
have full rights.
I can't change application, i don't want to crate another users with
different rights.
I want the same user to have different rights using application and query
analyzer.
Is it possible ? Maybe something similar...
regards
m."marta" <marta20wawa@.go2.pl> wrote in message
news:dcbnmq$32b$1@.atlantis.news.tpi.pl...
> Hi
> I have users in domain group who use application which uses sqlserve, they
> have rights to insert, update, delete. I want some of the members of this
> domain group to connect directly to the database using query analyzer but
> with right only to read and they still of course can use application and
> have full rights.
> I can't change application, i don't want to crate another users with
> different rights.
> I want the same user to have different rights using application and query
> analyzer.
> Is it possible ? Maybe something similar...
>
Don't multi-post. See response in .server.
David|||If you are using user rights with an application and not an application
role, then there is no way for the server to differentiate between a
user using product x or product y; it simply sees a request for data
from a user.
However, if your application can be re-tooled to use an application
role instead, then that changes things drastically. Of course, that
limits your applications ability to inherit from Active Directory, so
it may not be a viable solution.
Stu

Is it possible ...?

Hi
I have users in domain group who use application which uses sqlserve, they
have rights to insert, update, delete. I want some of the members of this
domain group to connect directly to the database using query analyzer but
with right only to read and they still of course can use application and
have full rights.
I can't change application, i don't want to crate another users with
different rights.
I want the same user to have different rights using application and query
analyzer.
Is it possible ? Maybe something similar...
regards
m.
"marta" <marta20wawa@.go2.pl> wrote in message
news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> Hi
> I have users in domain group who use application which uses sqlserve, they
> have rights to insert, update, delete. I want some of the members of this
> domain group to connect directly to the database using query analyzer but
> with right only to read and they still of course can use application and
> have full rights.
> I can't change application, i don't want to crate another users with
> different rights.
> I want the same user to have different rights using application and query
> analyzer.
> Is it possible ? Maybe something similar...
>
In this situation users should be granted Read permissions only, and in the
application, they can acquire different permissions by running
sp_setapprole.
David
|||David Browne napisal(a):
> "marta" <marta20wawa@.go2.pl> wrote in message
> news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> In this situation users should be granted Read permissions only, and in the
> application, they can acquire different permissions by running
> sp_setapprole.
> David
I can't change permissions asigned to domain group to which they
belong.
I can't change application in any way, i don't have acess to use
application role. I can't touch application. For me the best solution
would be if in query analyzer is check button "read only", and i could
use it ;)
I need to give users read only access using isql.
M.
|||I believe that the closest you can come is to create triggers on your tables from which you check
the application name (APP_NAME()) and if not expected, you rollback inside the trigger. This will
not prevent a bad seed from writing an app, setting the expected application name and do the bad
operations, though.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"sqlserver" <grupy_d@.go2.pl> wrote in message
news:1122622386.882273.249700@.g43g2000cwa.googlegr oups.com...
> David Browne napisal(a):
> I can't change permissions asigned to domain group to which they
> belong.
> I can't change application in any way, i don't have acess to use
> application role. I can't touch application. For me the best solution
> would be if in query analyzer is check button "read only", and i could
> use it ;)
> I need to give users read only access using isql.
> M.
>
|||Think of writing an app that lets users enter select SQL statements only and
shows the results in a grid control.
Don't set the grid to allow updates. You can probably find some code for
something like that in the samples.
HTH
"marta" <marta20wawa@.go2.pl> wrote in message
news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> Hi
> I have users in domain group who use application which uses sqlserve, they
> have rights to insert, update, delete. I want some of the members of this
> domain group to connect directly to the database using query analyzer but
> with right only to read and they still of course can use application and
> have full rights.
> I can't change application, i don't want to crate another users with
> different rights.
> I want the same user to have different rights using application and query
> analyzer.
> Is it possible ? Maybe something similar...
> regards
> m.
>

Is it possible ...?

Hi
I have users in domain group who use application which uses sqlserve, they
have rights to insert, update, delete. I want some of the members of this
domain group to connect directly to the database using query analyzer but
with right only to read and they still of course can use application and
have full rights.
I can't change application, i don't want to crate another users with
different rights.
I want the same user to have different rights using application and query
analyzer.
Is it possible ? Maybe something similar...
regards
m."marta" <marta20wawa@.go2.pl> wrote in message
news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> Hi
> I have users in domain group who use application which uses sqlserve, they
> have rights to insert, update, delete. I want some of the members of this
> domain group to connect directly to the database using query analyzer but
> with right only to read and they still of course can use application and
> have full rights.
> I can't change application, i don't want to crate another users with
> different rights.
> I want the same user to have different rights using application and query
> analyzer.
> Is it possible ? Maybe something similar...
>
In this situation users should be granted Read permissions only, and in the
application, they can acquire different permissions by running
sp_setapprole.
David|||David Browne napisal(a):
> "marta" <marta20wawa@.go2.pl> wrote in message
> news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> In this situation users should be granted Read permissions only, and in th
e
> application, they can acquire different permissions by running
> sp_setapprole.
> David
I can't change permissions asigned to domain group to which they
belong.
I can't change application in any way, i don't have acess to use
application role. I can't touch application. For me the best solution
would be if in query analyzer is check button "read only", and i could
use it ;)
I need to give users read only access using isql.
M.|||I believe that the closest you can come is to create triggers on your tables
from which you check
the application name (APP_NAME()) and if not expected, you rollback inside t
he trigger. This will
not prevent a bad seed from writing an app, setting the expected application
name and do the bad
operations, though.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"sqlserver" <grupy_d@.go2.pl> wrote in message
news:1122622386.882273.249700@.g43g2000cwa.googlegroups.com...
> David Browne napisal(a):
> I can't change permissions asigned to domain group to which they
> belong.
> I can't change application in any way, i don't have acess to use
> application role. I can't touch application. For me the best solution
> would be if in query analyzer is check button "read only", and i could
> use it ;)
> I need to give users read only access using isql.
> M.
>|||Think of writing an app that lets users enter select SQL statements only and
shows the results in a grid control.
Don't set the grid to allow updates. You can probably find some code for
something like that in the samples.
HTH
"marta" <marta20wawa@.go2.pl> wrote in message
news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> Hi
> I have users in domain group who use application which uses sqlserve, they
> have rights to insert, update, delete. I want some of the members of this
> domain group to connect directly to the database using query analyzer but
> with right only to read and they still of course can use application and
> have full rights.
> I can't change application, i don't want to crate another users with
> different rights.
> I want the same user to have different rights using application and query
> analyzer.
> Is it possible ? Maybe something similar...
> regards
> m.
>

Is it possible ...?

Hi
I have users in domain group who use application which uses sqlserve, they
have rights to insert, update, delete. I want some of the members of this
domain group to connect directly to the database using query analyzer but
with right only to read and they still of course can use application and
have full rights.
I can't change application, i don't want to crate another users with
different rights.
I want the same user to have different rights using application and query
analyzer.
Is it possible ? Maybe something similar...
regards
m."marta" <marta20wawa@.go2.pl> wrote in message
news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> Hi
> I have users in domain group who use application which uses sqlserve, they
> have rights to insert, update, delete. I want some of the members of this
> domain group to connect directly to the database using query analyzer but
> with right only to read and they still of course can use application and
> have full rights.
> I can't change application, i don't want to crate another users with
> different rights.
> I want the same user to have different rights using application and query
> analyzer.
> Is it possible ? Maybe something similar...
>
In this situation users should be granted Read permissions only, and in the
application, they can acquire different permissions by running
sp_setapprole.
David|||David Browne napisal(a):
> "marta" <marta20wawa@.go2.pl> wrote in message
> news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> > Hi
> >
> > I have users in domain group who use application which uses sqlserve, they
> > have rights to insert, update, delete. I want some of the members of this
> > domain group to connect directly to the database using query analyzer but
> > with right only to read and they still of course can use application and
> > have full rights.
> >
> > I can't change application, i don't want to crate another users with
> > different rights.
> >
> > I want the same user to have different rights using application and query
> > analyzer.
> > Is it possible ? Maybe something similar...
> >
> In this situation users should be granted Read permissions only, and in the
> application, they can acquire different permissions by running
> sp_setapprole.
> David
I can't change permissions asigned to domain group to which they
belong.
I can't change application in any way, i don't have acess to use
application role. I can't touch application. For me the best solution
would be if in query analyzer is check button "read only", and i could
use it ;)
I need to give users read only access using isql.
M.|||I believe that the closest you can come is to create triggers on your tables from which you check
the application name (APP_NAME()) and if not expected, you rollback inside the trigger. This will
not prevent a bad seed from writing an app, setting the expected application name and do the bad
operations, though.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"sqlserver" <grupy_d@.go2.pl> wrote in message
news:1122622386.882273.249700@.g43g2000cwa.googlegroups.com...
> David Browne napisal(a):
>> "marta" <marta20wawa@.go2.pl> wrote in message
>> news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
>> > Hi
>> >
>> > I have users in domain group who use application which uses sqlserve, they
>> > have rights to insert, update, delete. I want some of the members of this
>> > domain group to connect directly to the database using query analyzer but
>> > with right only to read and they still of course can use application and
>> > have full rights.
>> >
>> > I can't change application, i don't want to crate another users with
>> > different rights.
>> >
>> > I want the same user to have different rights using application and query
>> > analyzer.
>> > Is it possible ? Maybe something similar...
>> >
>> In this situation users should be granted Read permissions only, and in the
>> application, they can acquire different permissions by running
>> sp_setapprole.
>> David
> I can't change permissions asigned to domain group to which they
> belong.
> I can't change application in any way, i don't have acess to use
> application role. I can't touch application. For me the best solution
> would be if in query analyzer is check button "read only", and i could
> use it ;)
> I need to give users read only access using isql.
> M.
>|||Think of writing an app that lets users enter select SQL statements only and
shows the results in a grid control.
Don't set the grid to allow updates. You can probably find some code for
something like that in the samples.
HTH
"marta" <marta20wawa@.go2.pl> wrote in message
news:dcbnlj$2vi$1@.atlantis.news.tpi.pl...
> Hi
> I have users in domain group who use application which uses sqlserve, they
> have rights to insert, update, delete. I want some of the members of this
> domain group to connect directly to the database using query analyzer but
> with right only to read and they still of course can use application and
> have full rights.
> I can't change application, i don't want to crate another users with
> different rights.
> I want the same user to have different rights using application and query
> analyzer.
> Is it possible ? Maybe something similar...
> regards
> m.
>

IS it OK to promote an SQL Server to a Domain Controller?

I'm running a Windows 2000 stand alone server with SQL Server 2000 on it. I
need to promote this Server to a Domain Controller for a new domain. I
won't be renaming the server as I know this can cause problems with the SQL
Server (unless it can be easily done).
What kind of problems would I run into? Any steps that need to be followed?
Running DCPromo to create a new Domain should copy the local User database
into the new Domain correct?
ThanksMichael,
From SQL 7.0, this article describes some consequences:
http://msdn.microsoft.com/library/en-us/dnsql7/html/sql7security.asp?frame=true
However, this article suggest that you not do that if you have a choice.
http://msdn.microsoft.com/library/default.asp?
url=/library/en-us/dnnetsec/html/thcmch18.asp
Russell Fields
"Michael" <no@.no.com> wrote in message
news:OeEOCu4rDHA.2392@.TK2MSFTNGP10.phx.gbl...
> I'm running a Windows 2000 stand alone server with SQL Server 2000 on it.
I
> need to promote this Server to a Domain Controller for a new domain. I
> won't be renaming the server as I know this can cause problems with the
SQL
> Server (unless it can be easily done).
> What kind of problems would I run into? Any steps that need to be
followed?
> Running DCPromo to create a new Domain should copy the local User database
> into the new Domain correct?
> Thanks
>|||Hi Michael,
Thank you for using MSDN Newsgroup! It's my pleasure to assist you with your issue.
From your description, I understand that you would like to promote you SQL 2000 Server to a
Domain Controller for a new domain. However, you didn't point out the target of this promotion.
Based on my experience, if you promote a SQL Server to a new domain, the most common
problem you will face is orphan logins and some login permission problems. You can use
sp_grantlogin to manually add the logins into the new domain, and use sp_grantdbaccess to
associate the group members with a user identifier (ID) in each database they need to
access.
Here I provide you with a simple example:
============================USE master
GO
-- Authorize all members of NETDOMAIN\Managers to connect
-- using Windows Authentication.
sp_grantlogin 'NETDOMAIN\Managers'
GO
-- Make pubs the default database for Michael and Northwind the default database for Billy.
sp_defaultdb 'NETDOMAIN\Michael', 'pubs'
sp_defaultdb 'NETDOMAIN\Billy', 'Northwind'
USE pubs
GO
-- Grant a specific member Michael of the group access to
-- pubs with a specific user.
sp_grantdbaccess 'NETDOMAIN\Michael', 'Michael'
USE Northwind
GO
-- Grant a specific member Billy of the group access to
-- Northwind with a specific user.
sp_grantdbaccess 'NETDOMAIN\Billy', 'Billy'
=============================
As to renaming the server, there is also an easy way to perform like that:
-- For a default instance:
sp_dropserver <old_servername>
go
sp_addserver <new_servername> , local
go
-- For a named instance:
sp_dropserver <old_servername\instancename>
go
sp_addserver <new_servername\instancename> , local
go
Michael, does this answer your question? Please apply my suggestion above and let me
know if it helps you resolve your problem.
For more information, you can reference the following articles:
240872 HOW TO: Resolve Permission Issues When You Move a Database Between
http://support.microsoft.com/?id=240872
246133 HOW TO: Transfer Logins and Passwords Between Instances of SQL Server
http://support.microsoft.com/?id=246133
Best regards,
Billy Yao
Microsoft Online Support
----
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.
Please reply to newsgroups only. Thanks.