GLOBAL GROUPS

Hi ,
This is kiran from india.
I work in ABC organization and we have 2000 AD.
We have created Global Groups and users are added.
We have create Server Domain local Groups and added them to Server Local Gro
up
We have assigned SQL-2000 permissions to Server Local Groups.
And global users are not able to get the required access to their roles
assigned..
We tried to add the Global Group to Server Local group and it works.
Please suggest.Hi
You need to use sp_grantlogin on whatever group you are using be it local or
global.
John
"KIRAN MAHA PATRO" <KIRAN MAHA PATRO@.discussions.microsoft.com> wrote in
message news:8C20553D-7CA4-4E7D-AEFC-4A27892FAD7D@.microsoft.com...
> Hi ,
> This is kiran from india.
> I work in ABC organization and we have 2000 AD.
> We have created Global Groups and users are added.
> We have create Server Domain local Groups and added them to Server Local
> Group
> We have assigned SQL-2000 permissions to Server Local Groups.
> And global users are not able to get the required access to their roles
> assigned..
> We tried to add the Global Group to Server Local group and it works.
> Please suggest.|||Hi ,
Please explain me why it does not work in SQL..But the permission work fine
on NTFS .
Kiran S
"John Bell" wrote:

> Hi
> You need to use sp_grantlogin on whatever group you are using be it local
or
> global.
> John
>
> "KIRAN MAHA PATRO" <KIRAN MAHA PATRO@.discussions.microsoft.com> wrote in
> message news:8C20553D-7CA4-4E7D-AEFC-4A27892FAD7D@.microsoft.com...
>
>|||Hi
If you have added the group and the group has the appropriate
permissions then members of that group will also get those permissions.
As well as granting login, you will also need to either add the login
to a role or grant permissions to that login directly with
sp_grantdbaccess and the GRANT command.
John|||Hi John,
Thanks for reply.
I am facing the problem with the DB ROLES users ...
who are not able to do the specifed roles after they were added to
GLOBAL->DOMAIN LOCAL->SERVER LOCAL GROUPS.
But it works fine is GLOBAL->SERVER LOCAL GROUP.
DOES SQL TAKE TRANSATIVE PERMISSION AOUTOMATICALLY OR WE HAVE TO SOME THING
SUCH THAT GLOBAL USERS CAN DO THE SPECIFIED ROLES.
Waiting for reply.
Kiran S
"John Bell" wrote:

> Hi
> If you have added the group and the group has the appropriate
> permissions then members of that group will also get those permissions.
> As well as granting login, you will also need to either add the login
> to a role or grant permissions to that login directly with
> sp_grantdbaccess and the GRANT command.
> John
>|||Hi
I don't think that this should be the case, although I have never tried a
three tiered approach. There is always a risk that you are inadvertantly
giving the global group more permissions than necessary, either by not
knowing they should not access SQL Server or other privileges being granted
to the domain group.
What account is the SQL Server service running under?
John
"KIRAN MAHA PATRO.S" <KIRANMAHAPATROS@.discussions.microsoft.com> wrote in
message news:F7CB48CB-0264-44CD-BE2C-6BA22F4419B0@.microsoft.com...[vbcol=seagreen]
> Hi John,
> Thanks for reply.
> I am facing the problem with the DB ROLES users ...
> who are not able to do the specifed roles after they were added to
> GLOBAL->DOMAIN LOCAL->SERVER LOCAL GROUPS.
> But it works fine is GLOBAL->SERVER LOCAL GROUP.
> DOES SQL TAKE TRANSATIVE PERMISSION AOUTOMATICALLY OR WE HAVE TO SOME
> THING
> SUCH THAT GLOBAL USERS CAN DO THE SPECIFIED ROLES.
> Waiting for reply.
> Kiran S
> "John Bell" wrote:
>