Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've had someone set up a domain controller on windows 2008 on one server, and sql server 2008 on another. The domain seems to be working fine, I'm logged on as a domain user on both servers, nothing seems to be a problem there.

However, when I try to add a domain user/group to SQL Server Security (e.g. clicking ok from the create login screen) it says it can't find it (even though I've used the search to find the correct account in the first place), when I try to logon (even though I haven't added it yet) it says something about the account being part of an untrusted domain instead of saying I don't have permission to log on.

Anyone have any ideas on what is set up incorrectly?

share|improve this question
up vote 1 down vote accepted

a. Check that the user account the SQL Server service is running as a domain account.
From MSDN:

If the service must interact with network services, access domain resources like file shares or if it uses linked server connections to other computers running SQL Server, you might use a minimally-privileged domain account. Many server-to-server activities can be performed only with a domain user account. This account should be pre-created by domain administration in your environment.

b. Ensure the DNS server being used by the member server knows about the domain, i.e. can resolve SRV records for AD services. See this blog post for more information.

c. Follow resolution steps in the MS KB article.

share|improve this answer
They are dynamic, this is just a test atm so I haven't bother to assigned static addresses. They haven't changed though. Why would this cause the problem... they can see each other without a problem, domain can be resolved fine, dns and domain controller are same machine. I don't quite understand why I'm having this problem in the first place... – Mr Shoubs May 26 '10 at 15:14
have a dynamic ip isnt the cause, but sometimes in soho setup's the pesky router's DHCP will assign its own DNS server which can be a problem. – Nick Kavadias May 26 '10 at 15:28
I've got DNS forwarding setup, so that isn't causing a problem, what weird is everything seems find, except for adding logons to sql server. for example, when I enter the name in the login box and click search, the dialog appears and lets me seach my domain without problem, I can choose who I want, click ok, name appears in the login name textbox e.g. "domain\user" I set the mappings click ok, then get an error message saying it can't find the "domain\user". – Mr Shoubs May 26 '10 at 15:34
ive updated my answer to be more complete – Nick Kavadias May 26 '10 at 15:40
you've got dns forwarding setup where? – Nick Kavadias May 26 '10 at 15:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.