Sunday, February 19, 2012

How to access SQL Server on another domain with Windows authentica

I have two computers, client and server. The client is running Windows 2000
Professional and is in a workgroup, say "MyWorkgroup". The server is runnin
g
Windows Server 2003 Standard Edition and is in a domain, say "MyDomain".
The server has SQL Server 2000 Standard Edition with SP3a installed and is
using Windows authentication. What I need is to logon to the client as some
generic local administrator user and access SQL Server on the server using
Windows Authentication (i.e. domain user)? How can I do this? Impersonatin
g
a domain user on the server from the client (which is not in the domain, jus
t
in a workgroup)? But how can I do this kind of impersonation? BTW, the
client is written in C++.NET using Windows Forms and accessing SQL Server
using ADO.NET.
Thank you.CyberDigger,
so let me understand your problem clearly first.
One is a server running Sql Server (Win 2k3) This is in MyDoman.
Second is a client running your winforms app. (Win2k) This is in
MyWorkGroup.
You want -- to connect to the sql server database, using the credentials
used to log on to the local client box'
I don't think that's do-able since the anything on the domain will never be
able to validate locally entered credentials on the client. The best you can
do is to remote over to the win2k3 server itself and something running on
the win2k3 server with sufficient privelleges in the domain acts as your
data layer - that might be an acceptable solution?
I hope I'm wrong though
- Sahil Malik
http://dotnetjunkies.com/weblog/sahilmalik
"CyberDigger" <CyberDigger@.discussions.microsoft.com> wrote in message
news:3B3A9B3F-B2F5-4924-B0A5-B53D41A10FD1@.microsoft.com...
>I have two computers, client and server. The client is running Windows
>2000
> Professional and is in a workgroup, say "MyWorkgroup". The server is
> running
> Windows Server 2003 Standard Edition and is in a domain, say "MyDomain".
> The server has SQL Server 2000 Standard Edition with SP3a installed and is
> using Windows authentication. What I need is to logon to the client as
> some
> generic local administrator user and access SQL Server on the server using
> Windows Authentication (i.e. domain user)? How can I do this?
> Impersonating
> a domain user on the server from the client (which is not in the domain,
> just
> in a workgroup)? But how can I do this kind of impersonation? BTW, the
> client is written in C++.NET using Windows Forms and accessing SQL Server
> using ADO.NET.
> Thank you.|||Perhaps you can setup a linked server (which includes the remote
credentials) and use that in the server-side join...
____________________________________
William (Bill) Vaughn
Author, Mentor, Consultant
Microsoft MVP
www.betav.com
Please reply only to the newsgroup so that others can benefit.
This posting is provided "AS IS" with no warranties, and confers no rights.
__________________________________
"Sahil Malik" <contactmethrumyblog@.nospam.com> wrote in message
news:%23ZkzzIh9EHA.2676@.TK2MSFTNGP12.phx.gbl...
> CyberDigger,
> so let me understand your problem clearly first.
> One is a server running Sql Server (Win 2k3) This is in MyDoman.
> Second is a client running your winforms app. (Win2k) This is in
> MyWorkGroup.
> You want -- to connect to the sql server database, using the credentials
> used to log on to the local client box'
> I don't think that's do-able since the anything on the domain will never
> be able to validate locally entered credentials on the client. The best
> you can do is to remote over to the win2k3 server itself and something
> running on the win2k3 server with sufficient privelleges in the domain
> acts as your data layer - that might be an acceptable solution?
> I hope I'm wrong though
> - Sahil Malik
> http://dotnetjunkies.com/weblog/sahilmalik
>
>
> "CyberDigger" <CyberDigger@.discussions.microsoft.com> wrote in message
> news:3B3A9B3F-B2F5-4924-B0A5-B53D41A10FD1@.microsoft.com...
>|||Yeah that's a good idea.
- Sahil Malik
http://dotnetjunkies.com/weblog/sahilmalik
"William (Bill) Vaughn" <billvaRemoveThis@.nwlink.com> wrote in message
news:exowOHr9EHA.3708@.TK2MSFTNGP14.phx.gbl...
> Perhaps you can setup a linked server (which includes the remote
> credentials) and use that in the server-side join...
> --
> ____________________________________
> William (Bill) Vaughn
> Author, Mentor, Consultant
> Microsoft MVP
> www.betav.com
> Please reply only to the newsgroup so that others can benefit.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> __________________________________
> "Sahil Malik" <contactmethrumyblog@.nospam.com> wrote in message
> news:%23ZkzzIh9EHA.2676@.TK2MSFTNGP12.phx.gbl...
>|||Here is a way you can do it:
On the server, set up a local NT/2000 account with the same login name and
password as used to log into the workstation.
Give that account permission using NT Authentication.
Use NT Authentication on clients from the workstation.
I will caution you that when you do this, if you change your password at the
local workstation, you will get logon errors unless you synchronize your
password on the server.
"CyberDigger" wrote:

> I have two computers, client and server. The client is running Windows 20
00
> Professional and is in a workgroup, say "MyWorkgroup". The server is runn
ing
> Windows Server 2003 Standard Edition and is in a domain, say "MyDomain".
> The server has SQL Server 2000 Standard Edition with SP3a installed and is
> using Windows authentication. What I need is to logon to the client as so
me
> generic local administrator user and access SQL Server on the server using
> Windows Authentication (i.e. domain user)? How can I do this? Impersonat
ing
> a domain user on the server from the client (which is not in the domain, j
ust
> in a workgroup)? But how can I do this kind of impersonation? BTW, the
> client is written in C++.NET using Windows Forms and accessing SQL Server
> using ADO.NET.
> Thank you.

No comments:

Post a Comment