Article ID: 178111
Article Last Modified on 10/27/2006
APPLIES TO
- Microsoft SQL Server 6.5 Standard Edition
This article was previously published under Q178111
BUG #: 17507 (SQLBUG_65)
SYMPTOMS
Granting logins to members of global groups or expanding a global group in SQL Security Manager may cause an error message if either of the following conditions is true:
- The MSSQLServer service account is not a member of the domain that the global group belongs to.
-or-
- The MSSQLServer service account is not a member of a domain that is trusted by the global group's domain.
The error message that you receive is:
WORKAROUND
To work around this problem, do any one of the following:
- Start the MSSQLServer service as the local system account.
- Start the MSSQLServer service as a domain user account from the global group's domain, making sure that the domain user account is also a member of the local Administrators group on the SQL Server. However, if there are other global groups from other trusted domains, you will not be able to see those users unless the domain of the service account is trusted by the domains of the other global groups.
- Instead of adding global groups to the local group on the SQL Server, add the users from the trusted domain directly to the local group on the SQL Server.
Note We recommend that you use a local user account or a domain user account as the SQL Server service startup account. For security reasons, we recommend that you do not assign Administrator permissions to the account.
STATUS
Microsoft has confirmed this to be a problem in SQL Server 6.5. This problem has been corrected in Service Pack 5a for Microsoft SQL Server 6.5.For more information, click the following article number to view the article in the Microsoft Knowledge Base:
197177 INF: How to Obtain SQL Server 6.5 Service Pack 5a
For more information, contact your primary support provider.
Keywords: kbbug kbfix KB178111
