Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to restrict access to a SQLServer 2008 database to users of a given AD group, without having to create accounts for each user?

If so, how do I do it?

Users will be authenticating with SQLS with Windows Authentication using their respective accounts.


share|improve this question
up vote 3 down vote accepted

Sure you can!

Just go to the Security\Logins->New Login... as specify your group in the "Login name" text box: New Login

And them make sure to assing this group to an appropriate database user and role: User mapping

share|improve this answer
doesnt this mean i have to authenticate with SQSL as this single login though? Users will be authenticating with their own AD accounts – Andrew Bullock Sep 3 '10 at 10:33
I don't know what SQSL is and I'm assuming in your question that you mean you want to grant access to a specific database based on AD group membership, and if so, Regent's answer is correct. I've used this method many times. When members of the group access the database with their AD accounts they'll be granted access by virtue of their membership in the group. – joeqwerty Sep 3 '10 at 10:49
yeah it does work, didnt realise it was this simple. cheers all – Andrew Bullock Sep 3 '10 at 10:55
I meant SQLS (sql server), was a typo – Andrew Bullock Sep 3 '10 at 10:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.