Welcome to dbFreaks.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Can't connect using mixed auth. mode and a windows accounts

 
   Database Help (Home) -> Setup RSS
Next:  new sql 2008 install - sample databases?  
Author Message
moondaddy

External


Since: Jan 25, 2008
Posts: 35



(Msg. 1) Posted: Tue Oct 07, 2008 10:36 am
Post subject: Can't connect using mixed auth. mode and a windows accounts
Archived from groups: microsoft>public>sqlserver>setup (more info?)

I have a new sql 08 standard install (on a new windows server 2008 standard
full install) and original selected windows authentication during setup.
then I went into the configuration manager, selected the server/properties
and selected 'this account' to change it from windows authentication to
mixed. I then used the browse button to select the the domain administrator
account, and entered it's password. Now back in SSMS I tried to connect to
the server using mixed mode and it fails. I made sure that tcp/ip and named
pipes were enabled in the config mngr.

However, I can still connect using windows authentication. Then I added a
test user to sql server and was able to connect using that user and mixed
mode. Then I added another 'windows user' from the widows domain
(domain\someuser) and could not connect to sql server in mixed mode in ssms.
all users were assigned the role sysadmin. I then went back into the config
mngr and selected build-in-account for the athentication and assinged it
Network Server. I still could not connect using the windows accounts.

can someone please explain whats going on here?

 >> Stay informed about: Can't connect using mixed auth. mode and a windows accounts 
Back to top
Login to vote
Ekrem_Önsoy

External


Since: Jan 11, 2008
Posts: 243



(Msg. 2) Posted: Tue Oct 07, 2008 2:25 pm
Post subject: Re: Can't connect using mixed auth. mode and a windows accounts [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

It's a little bit confusing story, but I guess I understand the problem from
the general context.

As far as I understand, your SQL Server 2008 instance is installed on your
Windows Server 2008. And I guess, your Active Directory is installed on this
Windows Server. So, this is your SQL Server server and Domain Controller. Or
this is a member server which is also a member of this AD.

First of all, if you want to set your SQL Server Instance' s Authentication
Mode to Mixed Mode, perform the following steps:
- Open SSMS
- Connect to your SQL Server Instance
- Go to your Instance's name on the Object Explorer, right click on it and
Properties -> Security and choose "SQL Server and Windows Authentication
mode" from the "Server authentication".

If you are going to be using this SQL Server Instance as a server in your
domain environment, then you better create a non-priviledged User Account
which is going to be used only as your SQL Server service account. Then
configure your SQL Server Database Engine service's account using this newly
created Windows AD account. Ad perform this configuration using SQL Server
Configuration Manager.

Then connect to your SQL Server Instance using SSMS. Go to Security node on
Object Explorer in SSMS. Ensure that correct Windows Logins are created for
your Domain Users or whichever user you need and ensure that those Logins
are mapped to your databases according to your needs. You can map your users
using SSMS easily. Just go to your Logins' Properties and go to User Mapping
pane.

--
Ekrem Önsoy




"moondaddy" <moondaddy.RemoveThis@newsgroup.nospam> wrote in message
news:%23Rzv6JJKJHA.5320@TK2MSFTNGP02.phx.gbl...
>I have a new sql 08 standard install (on a new windows server 2008 standard
>full install) and original selected windows authentication during setup.
>then I went into the configuration manager, selected the server/properties
>and selected 'this account' to change it from windows authentication to
>mixed. I then used the browse button to select the the domain
>administrator account, and entered it's password. Now back in SSMS I tried
>to connect to the server using mixed mode and it fails. I made sure that
>tcp/ip and named pipes were enabled in the config mngr.
>
> However, I can still connect using windows authentication. Then I added a
> test user to sql server and was able to connect using that user and mixed
> mode. Then I added another 'windows user' from the widows domain
> (domain\someuser) and could not connect to sql server in mixed mode in
> ssms. all users were assigned the role sysadmin. I then went back into
> the config mngr and selected build-in-account for the athentication and
> assinged it Network Server. I still could not connect using the windows
> accounts.
>
> can someone please explain whats going on here?
>

 >> Stay informed about: Can't connect using mixed auth. mode and a windows accounts 
Back to top
Login to vote
Mark Han[MSFT]

External


Since: Aug 15, 2008
Posts: 76



(Msg. 3) Posted: Wed Oct 08, 2008 3:25 am
Post subject: RE: Can't connect using mixed auth. mode and a windows accounts [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hi Customer,

This is Mark, a SQL Server Engineer. I'm glad to assist you with the issue.
By the way, may I call you Moon?

Based on your description, I understand that you would like to let the
domain user connect to the SQL Server. Is it correct? If I misunderstand
the issue, please tell me. That will help us resolve the issue quickly.

in order to resolve the issue, I would like to explain the following:
1 The following actions you did by configuration manager will not change
the authentication model the SQL Server use. Those actions will change the
SQL Server startup account.
selected 'this account'->select the the domain administrator account,
and entered it's password.

2 To change the authentication model used by SQL Server, there are some
detail steps for you.
In SQL Server Management Studio Object Explorer, right-click the server,
and then click Properties.

On the Security page, under Server authentication, select the new server
authentication mode, and then click OK.

In the SQL Server Management Studio dialog box, click OK, to acknowledge
the need to restart SQL Server

3 For domain account, they also should use windows authentication to
connect to the SQL Server.
right kick SSMS->run as-> 'the following user'->type the domain user name
and password. Then we can use the domain user to connect to the SQL Server
by SSMS

Note, before doing the above, make sure the domain user is a login account
of the SQL Server.

If you have any questions on the above information, please tell me.

I look forward to hearing from you.

Best regards,
Mark Han
Microsoft Online Community Support
===========================================================
Delighting our customers is our #1 priority. We welcome your
comments and suggestions about how we can improve the
support we provide to you. Please feel free to let my manager
know what you think of the level of service provided. You can
send feedback directly to my manager at: msdnmg DeleteThis @microsoft.com.
===========================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for
non-urgent issues where an initial response from the community
or a Microsoft Support Engineer within 1 business day is acceptable.
Please note that each follow up response may take approximately
2 business days as the support professional working with you may
need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by
contacting Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
============================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
=========================================================
 >> Stay informed about: Can't connect using mixed auth. mode and a windows accounts 
Back to top
Login to vote
moondaddy

External


Since: Jan 25, 2008
Posts: 35



(Msg. 4) Posted: Wed Oct 08, 2008 11:14 am
Post subject: Re: Can't connect using mixed auth. mode and a windows accounts [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Thanks Mark and Ekron,

Yes this is a stand-alone server and therefore is also an AD. After
reviewing your comments, I think I understand my problem. I had assigned
the domain administrator account to this SQL instance. Then I closed ssms
and tried to reconnect to the SQL server instance using SQL server
authentication AND the domain user account. I think a long time ago there
was an option to select mixed mode where you could use a domain account or a
local SQL account, but here if I want to use a domain account I MUST select
Windows Authentication rather than SQL Server Authentication. All seems OK
now. Mark, FYI: I searched online and also in my SQL 2008 books and did
not find this articulated anywhere. Maybe its just obvious to most people
but I didn't get it until now.

Thanks for the help!!!

moon.



"Mark Han[MSFT]" <v-fathan DeleteThis @online.microsoft.com> wrote in message
news:wkLwl5QKJHA.1652@TK2MSFTNGHUB02.phx.gbl...
> Hi Customer,
>
> This is Mark, a SQL Server Engineer. I'm glad to assist you with the
> issue.
> By the way, may I call you Moon?
>
> Based on your description, I understand that you would like to let the
> domain user connect to the SQL Server. Is it correct? If I misunderstand
> the issue, please tell me. That will help us resolve the issue quickly.
>
> in order to resolve the issue, I would like to explain the following:
> 1 The following actions you did by configuration manager will not change
> the authentication model the SQL Server use. Those actions will change the
> SQL Server startup account.
> selected 'this account'->select the the domain administrator account,
> and entered it's password.
>
> 2 To change the authentication model used by SQL Server, there are some
> detail steps for you.
> In SQL Server Management Studio Object Explorer, right-click the server,
> and then click Properties.
>
> On the Security page, under Server authentication, select the new server
> authentication mode, and then click OK.
>
> In the SQL Server Management Studio dialog box, click OK, to acknowledge
> the need to restart SQL Server
>
> 3 For domain account, they also should use windows authentication to
> connect to the SQL Server.
> right kick SSMS->run as-> 'the following user'->type the domain user name
> and password. Then we can use the domain user to connect to the SQL Server
> by SSMS
>
> Note, before doing the above, make sure the domain user is a login account
> of the SQL Server.
>
> If you have any questions on the above information, please tell me.
>
> I look forward to hearing from you.
>
> Best regards,
> Mark Han
> Microsoft Online Community Support
> ===========================================================
> Delighting our customers is our #1 priority. We welcome your
> comments and suggestions about how we can improve the
> support we provide to you. Please feel free to let my manager
> know what you think of the level of service provided. You can
> send feedback directly to my manager at: msdnmg DeleteThis @microsoft.com.
> ===========================================================
> Get notification to my posts through email? Please refer to
> http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
> ications.
>
> Note: The MSDN Managed Newsgroup support offering is for
> non-urgent issues where an initial response from the community
> or a Microsoft Support Engineer within 1 business day is acceptable.
> Please note that each follow up response may take approximately
> 2 business days as the support professional working with you may
> need further investigation to reach the most efficient resolution.
> The offering is not appropriate for situations
> that require urgent, real-time or phone-based interactions or complex
> project analysis and dump analysis issues. Issues of this nature are best
> handled working with a dedicated Microsoft Support Engineer by
> contacting Microsoft Customer Support Services (CSS) at
> http://msdn.microsoft.com/subscriptions/support/default.aspx.
> ============================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> =========================================================
>
 >> Stay informed about: Can't connect using mixed auth. mode and a windows accounts 
Back to top
Login to vote
Mark Han[MSFT]

External


Since: Aug 15, 2008
Posts: 76



(Msg. 5) Posted: Thu Oct 09, 2008 2:25 am
Post subject: Re: Can't connect using mixed auth. mode and a windows accounts [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hi Moon,

Thank you for the reply and confirmation. I'm glad my explanation is
helpful.

Your understanding about my explanation is correct. I would like to ensure
that you have been 100% satisfied with our service. Satisfied customer is
our first priority.

If you have any other questions, we welcome you to post it here. It is our
pleasure to assist you with any issue related to SQL Server.

Besides, about the document of SSMS instruction, I will forward your
feedback to our document team. If anything updated, I will public it.

Thanks again for choosing Microsoft.

Best regards,
Mark Han
Microsoft Online Community Support
=========================================================
Delighting our customers is our #1 priority. We welcome your
comments and suggestions about how we can improve the
support we provide to you. Please feel free to let my manager
know what you think of the level of service provided. You can
send feedback directly to my manager at: msdnmg.DeleteThis@microsoft.com.
=========================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
=========================================================
 >> Stay informed about: Can't connect using mixed auth. mode and a windows accounts 
Back to top
Login to vote
Display posts from previous:   
   Database Help (Home) -> Setup All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]