replicate users between AD and SQL

[bshbsh]

Is there any tool or utility (either free or not) that can accomplish this. I have an application that can login to the SQL database users or into AD, but not both.
I was wondering is there was any tool which would help me either selectively or fully migrate usernames/password from SQL to AD and vice-versa.
Please advice.
Thanks.

 

[DThornton123]

Why not manage this by using groups? Setting up users in both locations seems to be a lot of unneeded work.

 

[bshbsh]

There are some users who I do not want in my AD. The app will not to both. So for a project which will have both internal and external, I point my app to DB and want to import my internal users from AD to SQL.

 

[DThornton123]

Pulling user names can be done with a vbs script but I've never found anything to pull passwords. Security in Windows is designed to protect the passwords and so there wouldn't be any "legitimate" tools to pull them. I guess you would need to pull the user name, then run a script that would "crack" the password. As you can imagine, that would open a lot of issues (definitely not to be done without prior approval from ALL IT management).

I've never tried adding a user to SQL and then disabling the account but that may be worth testing.

 

[Roadki11]

Well if you run your SQL server in "SQL Server and Windows" authentication mode that takes care of your AD to SQL integration. The ones you dont want in AD you will probably have to add manually to SQL.

But then again what you are trying to do is confusing me, you want all AD users in your SQL but not all SQL users in your AD? If all users are in AD, its one point of management then.

migrate usernames/password from SQL to AD and vice-versa

There are some users who I do not want in my AD

RoadKi11

 

[bshbsh]

I am sorry for the confusion. When I meant SQL users, I meant users that I store in the tables of a SQL database, not exactly SQL users. The typical 3 tier application which stores user info in a DB.