Windows authentication problem

[Sreedhar.T.P]

I have a network setup in which there are two domain controllers. There are 234 clients which logs to one of the domains. Both the servers are trusted as the users can log on to both the domains alternately.

The network also contains another Sql database server which is a part of this domain. I would like to keep this server in a workgroup which is not a part of this domain

I have found that when the server is changed from domain state to a workgroup the clients which connects the sql server are not able to connect even though they are in a same network.

The clients when tries to browse the server requsts a username and password which allows the users to connect the sql server.

I would like to give the users access to this server without a login prompt and would not like to share any of the drives as its contains the database.

Please give me a solution for the above senario.

[Ruslan]

Hi Sreedhar! There is two types of SQL authentication process - NT-based and own sql user database. Join SQL server to domain and enable NT authorization. Enjoy!

[Steven Clementi]

Sreedhar:

Part of the problem is that your SQL DB Server was set up for either mixed Authentication or Windows based Authentication. Since you took it out of the domain, it has no user database to look at except the local users.

If you create users on the local machine with exactly the same name and passwords as their domain accounts, SQL should allow the users to get right in since it is looking at the currently logged in account info for that user and his/her workstation and as long as it matches with the local info.... viola.

To keep the users from accessing any of the drives directly, make sure you remove any security permissions to any shares that would give them access.

Alternatively, you can put the DB box back into the domain as Ruslan suggests, but that defeats the purpose of wanting it OUTSIDE of the domain.



Steven

[Sreedhar.T.P]

I have found the solution. The following user's should be created in the server as local users with the same password inorder to get the access.
The problem is solved.
Thanks for the help for those who have given me a resonable reply