In 2000, How to Copy SQL Logins to Domain Logins on Same Server 1

[JohnBates]

hi all,

We have an older database that's on 2000.
It has a bunch of local logins (SQL Server authentication, the passwords never expire)

The auditor says Move them to domain accounts.

I've done a good bit of moving users, logins in the past but always to other servers.

I need to copy login jbates to new login CORPORATE\jbates and keep all the permissions that jbates had. These logins are all in roles/groups and none own any objects - I've checked that.

So I'm just trying to test with 1 user now to get a technique developed. I'm getting a lot of "user already exists" or "login already exists" errors.

it's probably easier than I'm making it out to be. Can anyone help?

Thanks, John

 

[mrdenny]

You'll want to query the sysxlogins table to get the logins that you need to create domain accounts for.

Use the scripts in this thread thread962-1324602 to get the current rights and modify the scripts to grant the rights to the new accounts. Check the table sysmembers within each database for the group membership. Have the users check thier domain accounts rights to make sure that the rights are correct before the SQL logins are deleted.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog