Setup AD Group Access

To allow Active Directory (AD) Group access to the Geobank Configuration Manager, without providing system administrator access to that group in SQL server, you will need to do the following in SQL Management Studio:

Since a domain group is being added in this example, the login name takes the form <DOMAIN NAME>\<GROUP>.

  1. Add the group login on the Security | Logins page:

  2. For the server roles, public must be enabled. In the examples below substitute “PERTH\gbtestgroup” with the name of the group you are giving access to:

  3. Under User Mapping, map to the configuration database and the data database, providing the group with db_owner access:

  4. You will then need to run the following query to grant execute access to the xp_logininfo stored procedure. Substitute “PERTH\gbtestgroup” with the actual name of the domain and group you are giving access to:

    5. If you get an error when running the stored procedure, such as “Cannot find the user <username>, because it does not exist or you do not have permission”, you will need to provide the user with public access (at least) to the master database: