Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Have created a linked server to active directory from SQL Server but getting a permission denied error when I try to query anything.

Under the security options for the linked server I have specified the connection to use a domain account which can query AD from powershell.

Should this account have any special permissions?

EDIT:

This is the error message I'm receiving from SQL

The OLE DB provider "ADsDSOObject" for linked server "ADSI" reported an error. The provider indicates that the user did not have the permission to perform the operation.

share|improve this question
1  
What are you querying? Any user should be able to see accounts, but they can't necessarily see all of the attributes. –  MDMarra Oct 13 '11 at 11:05
    
simply searching for account names... –  Richard Oct 13 '11 at 11:20
    
Unless you actually have a server named "ADSI" I suspect your real issue may be a faulty query. –  John Gardeniers Oct 13 '11 at 11:25
    
@John, I'm fairly sure that ADSI is a special case - so there doesn't need to be a server named ADSI for this to work –  Richard Oct 13 '11 at 12:59

1 Answer 1

up vote 1 down vote accepted

As you discovered using Powershell, unless changed, normal, authenticated, non-admin user accounts have the right to search & Read AD. No reason to believe this would be different from a SQL server. Sounds like there is a config issue with the SQL or script.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.