Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top


I was wondering if someone knows a way round this. I have a database which needs to be accessed by a Windows Group with read only access. Some individuals in this group need write access.

I have added the group and then the individual logins and setup the permissions accordingly but the Windows Group seems to take precedence over the individual logins.

Does anyone know how to get around this?



share|improve this question
up vote 0 down vote accepted

Permissions are cumulative, with the exception that DENY rights will overwrite GRANTs.

If you grant select to the group and deny update to the group, then grant update to the login they will not be able to update.

Make sure that you haven't denied any rights to the group or to public.

share|improve this answer
Thank you I removed the deny from the specific columns and this is now working. – anD666 Jan 21 '10 at 10:50
No problem, glad it was that easy. – mrdenny Jan 23 '10 at 6:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.