I guess this is a two part issue but would like to know how to do this in one step. When I create a user on the windows server it creates the user and mailbox on the exchange server but would like for it to also create a user on the SQL server that has trusted rights to run crystal reports we have created. Currently I have to create a new user on the SQL server which has public role assigned to the user but want them to also be trusted so they can run the reports. Right now they have to use the SA login to run the reports and I don't like that. I have read I need to give the sysadmin role to that user but that is like letting them use the SA login. How can I do this in one step and what role on the sql server can I give them that allows them to be trusted but not make modifications on the database?