	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

3.8

Authenticate to SQL Server with domain computer's local system account

Asked by titansfan20 in MS SQL Server, VB Script, Microsoft Development, Active Directory

Tags: SQL, VBScript, NT Authentication

Using Group Policy, I have assigned a shutdown script to domain computers, that will let me know when computers are off or on, and if they need Windows Updates, so I can use WoL to power up the machines at night and install the patches, then shut them back down.

The VBScript checks the status of updates using a registry key, and if it has updates waiting to install, it connects to an SQL database (SQL Server 2000) and inserts a record. Later, a script will use the record in that database to wake up machines.

The VBScript works great as long as I run it as a domain user account (using Integrated Security=SSPI;Persist Security Info=True in the connection string). However, when I assign it to run as a Shutdown Script via Group Policy, I get an access denied error:

Error: Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.

Computer Shutdown Scripts run as the LocalSystem account. I already knew this - I had to grant "Domain Computers" permissions to the share where the scripts are located so they could run them.

On my SQL server, I added the "Domain Computers" group and gave it permissions to write to the database, but adding the group to SQL Server this way doesn't seem to work like it does with normal NTFS file shares.

Does anyone know a way to allow domain computer accounts to authenticate with SQL? I need these to run as shutdown scripts - not log off scripts - and I REALLY don't want to put any domain credentials in the scripts in plain text.

Thanks in advance

(My vbscript code is below, in case it helps)

View the Solution FREE for 30 Days

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:

           
           
             'Option Explicit
'On Error Resume Next
 
Const wbemFlagReturnImmediately = &h10
Const wbemFlagForwardOnly = &h20
 
'Database connection string for SystemsInventory
Const strConnect = "Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security Info=True;Initial Catalog=SystemsInventory;Data Source=NAS-LCLSYDB01"
'Create database connection
set adbConn = CreateObject("ADODB.Connection")
'Create Connection to the Record Set
set adbRS = CreateObject("ADODB.RecordSet")
 
'Collect and store the following info for inventory:
 
'ComputerName
set WshNetwork = WScript.CreateObject("WScript.Network")
strComputerName = WshNetwork.ComputerName
 
'IP and MAC Address
Set objWMIService = GetObject("winmgmts:\\" & strComputerName & "\root\CIMV2")
Set colItems = objWMIService.ExecQuery("SELECT * FROM Win32_NetworkAdapterConfiguration WHERE IPEnabled = True", "WQL", _
                                          wbemFlagReturnImmediately + wbemFlagForwardOnly)
For Each objItem In colItems
	if not IsNull(objItem.IPAddress) Then
		strIPAddress = Join(objItem.IPAddress, ",")
		strNetwork = Left(strIPAddress,5)
		if strNetwork = "10.13" Then
			strRealIP = strIPAddress
			strMacAddress = objItem.MACAddress
		end if
	end if
Next
 
'Time of Shutdown
strShutDnTime = Date & " " & Time
 
'Open the Database Connection
adbConn.open strConnect
 
'Open the Record Set for modification
adbRS.Open "tbl_WoLInfo",adbConn,2,2
 
'Prepare records to insert
adbRS.AddNew
adbRS("ComputerName") = strComputerName
adbRS("ShutDownTime") = strShutDnTime
adbRS("IPAddress") = strRealIP
adbRS("MacAddress") = strMacAddress
 
 
'Insert records
adbRS.Update
 
'Close the Connections
adbRS.Close
adbConn.Close

           
         

20091118-EE-VQP-93 - Hierarchy / EE_QW_3_20080625

Hall of Fame

1. angelIII1,343,458
2. aneeshatti...1,140,813
3. rrjegan171,076,477
4. chapmandew767,967
5. RiteshShah730,535
6. BrandonG...626,234
7. acperkins610,988
8. reb73522,425
9. ralmada481,454
10. mark_wills446,542
11. mwvisa1407,463
12. matthews...381,238
13. Sharath_...287,698
14. EugeneZ251,860
15. CGLuttrell222,853
16. ScottPletc...222,540
17. momi_sa...206,089
18. pivar194,587
19. cs97jjm3180,186
20. pcelba176,068
21. pssandhu161,259
22. DanielWilson156,733
23. tigin44155,914
24. rob_farley143,153
25. JestersGrind139,263

1. angelIII12,728,120
2. aneeshatti...5,826,011
3. acperkins4,998,376
4. ScottPletc...4,590,513
5. chapmandew3,341,073
6. arbert2,245,195
7. Lowfatsp...2,174,384
8. EugeneZ1,924,643
9. imran_fast1,485,025
10. rafrancisco1,460,132
11. BrandonG...1,339,712
12. nmcdermaid1,263,861
13. mark_wills1,236,802
14. Hilaire1,221,775
15. matthews...1,181,709
16. Nightman1,158,168
17. bhess11,103,687
18. Mr_Peer...1,087,815
19. rrjegan171,076,477
20. ptjcb1,074,620
21. dtodd1,025,298
22. appari900,309
23. adathelad836,908
24. Sirees776,352
25. RiteshShah730,535

Authenticate to SQL Server with domain computer's local system account

Asked by titansfan20 in MS SQL Server, VB Script, Microsoft Development, Active Directory

Tags: SQL, VBScript, NT Authentication

About this solution