SQLAstro
SQLAstro

Reputation: 1

Windows Groups in SQL Server

Is there a prohibition for using a Windows Group account (with users) and mapping them to a credential in SQL Server.

I was able to make this work with an Windows Login Account and I believe this will work well with SQL Accounts.

Running the following:

ALTER LOGIN [DOMAIN\GROUP_NAME] FROM WINDOWS
ADD CREDENTIAL [credentialname];  
GO

I get the following error:

Cannot use parameter CREDENTIAL for a Windows login. error 15080

Upvotes: 0

Views: 395

Answers (1)

David Browne - Microsoft
David Browne - Microsoft

Reputation: 89091

Adding a credential to a Login is used to give a Windows identity to a SQL Login for interacting with external resources, typically in CLR code or Linked Servers.

CREDENTIAL = credential_name The name of a credential to be mapped to a SQL Server login. The credential must already exist in the server. For more information, see Credentials. A credential cannot be mapped to the sa login.

ALTER LOGIN

It's not intended, documented, or supported for Windows Logins of any kind, and doesn't actually work.

Upvotes: 1

Related Questions