Power Users cannot access SQL database.

[dsh135]

I am running SQL Server 2000 Standard SP4 on Windows Server 2003 SP1 x64. Domain Power Users cannot connect to the database until they are added to the administrators group on this system. Domain administrators connect without a problem.

Is there a security policy that I am missing?

Thank you for your help!

 

[mrdenny]

Nope. However the domain power users group doesn't have automatic access to the database. The local admin group does.

You'll need to add the domain\power users group to the SQL Server.

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(Not quite so old any more.)

 

[dsh135]

MrDenny,
We are connecting to the database using SQL authentication and it was never a problem when connecting on a 2003 Server without SP1 We started searching the event log to see which failures are being recorded when power users attempt to connect. We get a Security Failure, with an Event ID of 560, indicating a fail to connect to the "SC_MANAGER". In searching the web, one of my colleagues found the following statement on Cisco’s website: (

http://www.cisco.com/en/US/products/sw/voicesw/ps2237/products_field_notice09186a00804412a6.shtml

): "Microsoft has changed the permissions required by Windows Manager to complete OpenSCManager in Windows 2003 SP1. The change was implemented in Service Pack 1."

To me this indicates that power users can no long see the services list/database to see if the SQL Server service exists and returns and error at this point.

I am trying to find where I can change the permissions to the SC Manager, but have not been successful thus far.

Thank you for your help,
David.

 

[mrdenny]

What client are you using to connect?

What happens is you use OSQL to connect?

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(Not quite so old any more.)

 

[dsh135]

MrDenny,
The client is an application running on Windows XP Pro SP2 and Windows 2000 Pro SP4 systems. I did not try OSQL yet, however I get the same behavior using Query Analyzer connecting with SQL Authentication.

I forgot to mention that I also tried adding a power user to the SQL Server Users list for the database we are trying to connect to and the user is still not able to connect. This reinforces the belief that the user is blocked at the SC Manager level.

David.