adding 60 developers to SQL Server Security

Question

adding 60 developers to SQL Server Security

Eric Peterson

Hall of Fame

Points: 3192
More actions
May 22, 2006 at 2:50 pm

#190692

All
I am setting up a new development environment. I have 60 developers who all have windows accounts on the local domain. I have 45 developers who need access to the development SQL Server instance.
Is there an easy way to drop in or bulk select them from a list without going thru the process one at a time?
I know that I can use sp_addlogin, but I am not sure if I can do that with windows domain accounts....but there is the new Create login so If i can export the list I can generate a list or export a list I can quickly transform that inot a series of : CREATE LOGIN [ADVWORKS\fogisu] FROM WINDOWS :
Thanks in advance
Eric Peterson

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply

Yelena Varshal SSC-Dedicated Points: 34286 More actions · Answer 1

Eric,

There are easy ways to create a script based on a list. But I would not advise it in your particular case. I would ask your network administrators to create a global group of these developers and grant access to the group.

CREATE LOGIN statement does have From Windows clause. If this new Create Login does not let you to add a group then use good old sp_grantlogin that does let you to add a group.

Previously it was recommended that you add your global group to your local group first and grant access to a local group but I am not sure this design is still recommended. I would just grant access to the global group.

Regards,Yelena Varsha

Eric Peterson Hall of Fame Points: 3192 More actions · Answer 2

Thanks for the reply

The group idea is good, but it dosent work in our environment.

I got an export from the domain users, but the problem is it will give the name, not the actual ids...lol But our ids are a combination of first and last name so it was easy to generate and edit the statments and run it in a batch.

Thanks again

Eric

Rudyx - the Doctor SSC-Forever Points: 43695 More actions · Answer 3

Your Domain Admins can give you the exact information that you want, login name. Tey just have to use a couple of extra check boxes and ad a few more mouse points in order to geive you the correct exported information. I'd suggest going back for a round 2 export !

RegardsRudy KomacsarSenior Database Administrator"Ave Caesar! - Morituri te salutamus."