Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This seems like a question that should be common enough, but I can't find anything on it. Two questions, really:

  • How can I determine which account(s) have Windows authentication access to an instance of SQL Server 2008?
  • Can I change that set of users without being able to log in to the SQL Server instance?

Thanks very much in advance!

share|improve this question
up vote 3 down vote accepted

The sys.server_principals view contains all the logins with access to the instance. You can filter by type U and G to get just Windows logins and Windows groups.

You can use the the T-SQL commands CREATE LOGIN, ALTER LOGIN and DROP LOGIN to manage logins without using the GUI. There are similar commands available for database users.

share|improve this answer
I finally managed to get it working with your help - thank you very much! – ladenedge Jun 21 '10 at 22:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.