permissions of SQLServerMSSQLUser$ComputerName$MSSQLSERVER

is there a tSQL code you could check what are the permissions bestowed to the above group.

thanks
LVL 6
anushahannaAsked:
Who is Participating?
 
Vitor MontalvãoConnect With a Mentor MSSQL Senior EngineerCommented:
Isn't a user but a group. Go to Manage User options in Computer Management and you'll see that group there. Should be only a member in that group. That member should be the user that owns SQL Server service.
0
 
Vitor MontalvãoMSSQL Senior EngineerCommented:
What's that?
An AD group or AD user?
Wich SQL Server version are you using?
0
 
anushahannaAuthor Commented:
0
Learn to develop an Android App

Want to increase your earning potential in 2018? Pad your resume with app building experience. Learn how with this hands-on course.

 
anushahannaAuthor Commented:
user group created by installation?
0
 
Vitor MontalvãoMSSQL Senior EngineerCommented:
Now I see. Isn't really a user name but a variable :)
You have in that article what kind of permissions is needed in AD.
0
 
anushahannaAuthor Commented:
OK.

But those are only Default permissions, right? it might have changed over the years, and how do you check where its levels are now?

Why do you say it is a variable? Even it is a variable, it works with xp_logininfo, which is supposed to return information about Windows users and Windows groups.
0
 
Vitor MontalvãoMSSQL Senior EngineerCommented:
As far I know about Microsoft articles they are always up to date.
Variable it's the computer name.  :)

Anyway, that user is really a group that is created locally in the server and not in AD.
0
 
anushahannaAuthor Commented:
Thanks VMontalvao. My variable is COMNTR333.

I confirmed the following is in syslogins.
'COMNTR333\SQLServer2005MSSQLUser$COMNTR333$MSSQLSERVER'

then i created an user in tblTracker databases
use tblTracker
create user [COMNTR333\SQLServer2005MSSQLUser$COMNTR333$MSSQLSERVER] for login [COMNTR333\SQLServer2005MSSQLUser$COMNTR333$MSSQLSERVER]

then i tried to see its current permissions

USE tblTracker  
EXECUTE AS USER = 'COMNTR333\SQLServer2005MSSQLUser$COMNTR333$MSSQLSERVER';
SELECT * FROM fn_my_permissions(NULL, NULL)
REVERT;

but it gives error:
Cannot execute as the database principal because the principal "COMNTR333\SQLServer2005MSSQLUser$COMNTR333$MSSQLSERVER" does not exist, this type of principal cannot be impersonated, or you do not have permission.

if we cannot impersonate, is there any options to check its permissions?

thanks
0
 
anushahannaAuthor Commented:
Thanks VMontalvao.
0
All Courses

From novice to tech pro — start learning today.