Prev: Release free space reserved for tables
Next: MSSQL2008: Configuration Documenter Tool available ?
From: Patrick D. on 13 May 2010 12:15
Hi,

My SQL Server 2008 R2 is in a Workgroup, while the PC with the management
tools (sql 2008 R2 version) is in the same LAN, but in a domain.
I can ping the sql server from this pc. For this testing I disabled the
firewall on sql server.
SQL server is in Windows Authentication mode. The protocols "shared memory"
and "TCP/IP" are enabled on sql server.
How can I logon with the local admin-account of the sql server (w2k8 r2 in
Workgroup) from the PC in the domain?
(As you know, you cannot change the user, when "Connect to Server" dialog is
in Windows Authentication mode)

Thanks for your help.

Patrick
From: Erland Sommarskog on 13 May 2010 17:34
Patrick D. (PatrickD(a)discussions.microsoft.com) writes:
> My SQL Server 2008 R2 is in a Workgroup, while the PC with the management
> tools (sql 2008 R2 version) is in the same LAN, but in a domain.
> I can ping the sql server from this pc. For this testing I disabled the
> firewall on sql server.
> SQL server is in Windows Authentication mode. The protocols "shared
> memory" and "TCP/IP" are enabled on sql server.
> How can I logon with the local admin-account of the sql server (w2k8 r2 in
> Workgroup) from the PC in the domain?

The only possibility would be if you were able to do a Run As for that
admin account. That is, you need to impersonate that admin account in
Windows before you start SSMS. But I can't see how you could impersonate
an account outside the domain. Then again, Windows and Active Directory
is certainly not my field of epxertise.


--
Erland Sommarskog, SQL Server MVP, esquel(a)sommarskog.se

Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

From: Geoff Schaller on 14 May 2010 22:33
Patrick.

Not possible. Windows Authentication is just that. The current user
login is authenticated against the domain (when you start windows) and
then checked for valid login inside SQL Server. There is no possibility
of impersonation - by design.

The best solution is to create a SQL Server login and use that.

Geoff Schaller
Software Objectives



"Patrick D." <PatrickD(a)discussions.microsoft.com> wrote in message
news:136644AB-4F60-4A86-9C0F-6FAC24572CEA(a)microsoft.com:

> Hi,
>
> My SQL Server 2008 R2 is in a Workgroup, while the PC with the management
> tools (sql 2008 R2 version) is in the same LAN, but in a domain.
> I can ping the sql server from this pc. For this testing I disabled the
> firewall on sql server.
> SQL server is in Windows Authentication mode. The protocols "shared memory"
> and "TCP/IP" are enabled on sql server.
> How can I logon with the local admin-account of the sql server (w2k8 r2 in
> Workgroup) from the PC in the domain?
> (As you know, you cannot change the user, when "Connect to Server" dialog is
> in Windows Authentication mode)
>
> Thanks for your help.
>
> Patrick

 | 
Pages: 1
Prev: Release free space reserved for tables
Next: MSSQL2008: Configuration Documenter Tool available ?