Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So I'm at a client and to connect to their SQL Server, I need to use SQL Server Windows Authentication.

The thing is that I do have a user that allowed me to connect to their TFS server without any problems. I've been trying to add a user of their domain to my Administrator groups and it doesn't seem to be able to do so.

I've tried through the GUI or through the command line (net localgroup Administrators....).

No chance so far.

Is it even possible?

share|improve this question

No, that is not possible.

If you create a local account with the same username+password, that should work for many activities. It's fairly easy to setup and test, so you may want to try that.

share|improve this answer
up vote 3 down vote accepted

So you guys were right. Impossible to grant rights to a user outside of your own workgroup/domain. However, I found a workaround.

Since I needed to start SQL Server (aka: ssms.exe), I've found that I can start a process as another user like so:

runas /user:DOMAIN\user /netonly ssms.exe

And it runs without problem SQL Server with Windows Authentication.

My source:

share|improve this answer
+1 - runas w/ the /netonly argument is an under-appreciated tool. It certainly makes my life easier, carting around a laptop that isn't joined to any of my Custmers' domains but sometimes need to manage SQL Server or Hyper-V instances on their domains. – Evan Anderson Apr 7 '14 at 22:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.