I thought I knew databases and database security pretty well, but I am stumped.
SQL Server 2005 has good integration with Active Directory, and my understanding is that ‘Management Studio’ can basically query Active Directory to show me what AD groups/users have access to what database objects.
In the old days I just ran a sp_helprotect or similar stored procedure and it gave me what I needed.
My guess is that I need more priviledges to the database and can add the domain controller as a ‘linked server’ to the database? Then the Active Directory info would show up in management studio??
Assuming that Active Directory groups/users are tied to specific database objects, I assume I could then query who can get to what.
Or do I just need to break down and buy my DBA lunch and have her give me the info I need?
