I'm new to setting up Domains so I might be missing something simple here...

I've installed SQL Server 2008 on a Windows Server 2008 R2 box and I have another WS2008 R2 box acting as the domain controller.

I've joined the SQL server to the domain and it seems to be behaving itself fine. I can ping the DC by name and IP address.

I created a domain user 'SPSQLAdmin' that I want to use for database access with SharePoint but I can't seem to log on to SQL with this user.

SQL complains, saying that the user belongs to an untrusted domain.

I've configured the DC to delegate control for any service to the SQL Server but it doesn't improve the situation.

What should I try next?

Thanks in advance.

  • Is the SQL box an actual member of the DC's domain and not an isolated workgroup? Also check the surface area configuration in SQL. – PMGoldstein Oct 30 '10 at 0:44
  • Yes, the computer is part of the domain. – Sambo Oct 31 '10 at 7:18
  • I'm not sure what you mean by Surface Area Configuration. How should I check for this? – Sambo Oct 31 '10 at 7:20
  • No more SAC in 2008. – Sam Nov 1 '10 at 22:01

This can be accomplished by opening SQL Server Management Studio, connecting to the instance with the SA user or the Windows user that installed SQL, going to Security -> Logins, right click on Logins -> New Login.

Or run this query from a properly credentialed SQL user.

USE [master]

/* Create the user in the SQL instance itself with a simple query. */
/* And you may want to give them a decent role.  */

Did you actually add the Domain login within SQL Server? Simply adding the server to the domain is not enough, you need to add the login to SQL Server using SQL Server Managment Studio to indicate that it is allowed to connect to the server.

  • I get an error when attempting to add a login for the domain user that says the user cannot be found. Sorry I can't give you the exact message as I'm not at the server but it won't let me add a login even though I can do a search for the user from the login dialog and find them in the directory. – Sambo Nov 3 '10 at 12:40

Pinging by name and IP doesn't mean that you are successfully joined to the domain. Are you able to log on to the server where SQL Server is hosted with the domain admin account? Do you see any errors in the System event log on the server where SQL Server is installed corresponding to issues talking to the DC?

  • I added the server to the Domain through the Computer properties and I'm able to log on with the user I'm wanting to add to a SQL login for. – Sambo Oct 31 '10 at 7:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.