I Have Windows User Login and Windows User Group.
Consider User as A and Group as DBA group.
In scenario MR. A is part of DBA group. A as only basic rights in sql server And DBA group as SYSADMIN rights
I know if MR.A connects to sql server he may connect with DBA has he was part of it as SYSadmin Rights.
What if Both A and DBA group as SYSAdmin rights.Now how can know by which means he was Connected/logged in sql server.
by DBA group/or as A?
If 'A' is a member of DBAGroup and this group is having SYSADMIN permission then whenever 'A'will login he will get SA level access only. He can't login separately as only 'A' and as member of DBAGroup.
this is due to the behavior that authentication process overwrites the user's permission with the group access level.
Hope this helps.
answered Oct 29, 2014 at 09:13 AM
If I understand you correctly then you can use the query below to find the authentication path
answered Oct 29, 2014 at 08:02 AM