Create Windows NT/2000 Users

11,1 Tạo Windows NT/2000 Người dùng Mặc dù nó có vẻ lẻ để bắt đầu một cuộc thảo luận về an ninh SQL Server bằng cách mô tả quá trình thêm người sử dụng Windows NT/2000, điều quan trọng cần lưu ý là SQL Server bảo mật được tích hợp chặt chẽ với cơ quan đăng ký bảo mật Windows
Nội dung trích xuất từ tài liệu:
Create Windows NT/2000 Users 11.1 Create Windows NT/2000 UsersAlthough it might seem odd to begin a discussion of SQL Server security by describingthe process of adding users to Windows NT/2000, its important to note that SQL Serversecurity is tightly integrated with the Windows security registry. SQL Serveradministrators are pleased with the fact that SQL Server automatically recognizesWindows NT and Windows 2000 users, saving a considerable amount of administrativetime.This section explains the process of adding new users to Windows 2000. The next sectiondescribes how to add functional groups to Windows. Although these sections deal withWindows 2000, the process is nearly identical for Windows NT.Windows must recognize users before they can log in to the network and use thecomputers resources. You need to add a number of users to the Windows user registry.How do you make sure that all users are required to provide a network password beforethey can access the network?TechniqueWindows users cannot be added to the system from within SQL Servers EnterpriseManager. Youll have to use the Windows Control Panel applets to add new users andgroups.Note The settings you choose on this page of the Add New User dialog box do not affect the SQL Server settings you establish for the user. The settings you see in Figure 11.4 relate only to Windows and not SQL Server or the database data. Figure 11.4. Most of your users will be set up as Standard Users with no special capabilities.Note The first step in the following example is different on Windows NT 4.0 and Windows 2000. For Windows NT 4.0, you go to Start, Programs, Administrative Tools, User Manager. For Windows 2000, you go to Start, Settings, Control Panel, Administrative Tools, Computer Management; then you right-click on Users. Also, you must have administrative rights on the computer to add users to it.StepsSQL Server security is tightly integrated with Windows NT/2000 security. SQL Serverrecognizes the users and groups that are added to a Windows NT or Windows 2000domain. The first step toward security for SQL Server, of course, is to add users to thecomputer system. This section describes how to add individual users to a Windows NT orWindows 2000 computer.SQL Server consults the registered users on the computer when you create logins,discussed in How-To 11.5. The users name and description are accessible from the SQLServer security dialog boxes and help you recognize each user as you create SQL Serverlogins and establish security profiles.1. Choose Start, Settings, Control Panel and open the Users and Passwords Control Panel applet.2. Make sure the check box labeled Users Must Enter a User Name and Password to Use This Computer is checked, as shown in Figure 11.1. Figure 11.1. This dialog box allows you to add new Windows users and manage their group membership.3. Click the Add button to open the Add New User dialog box.4. Fill in the username, the full name of the user, and a description for the new user, as shown in Figure 11.2. Figure 11.2. The information you enter in the Add New User dialog box will be accessible from the SQL Server security dialog boxes.5. After you have provided the required user information, click the Next button to move to the second page of the dialog box.6. Enter the new users initial password into the password text box. Then type the password a second time in the Confirm Password text box (see Figure 11.3). When youre ready, click the Next button. Figure 11.3. Specify the users initial password in this dialog box. The user will be able to change it later, if necessary. 7. On the third page of the Add New User dialog box (see Figure 11.4), you specify the type of Windows access you want to provide this user. Although this information is not directly related to SQL Server, most often you will want to leave this setting at its default to Standard User. In most cases, you do not want to provide a user with more access than necessary. Note The settings you choose on this page of the Add New User dialog box do not affect the SQL Server settings you establish for the user. The settings you see in Figure 11.4 relate only to Windows and not SQL Server or the database data. 8. When all settings are complete, click the Finish button to add the new user to the collection of users on your computer.CommentsSQL Servers integration with Windows security is one of the major reasons that SQLServer has grown in popularity. Its ability to cooperate with Windows whenauthenticating users and providing database services dramatically reduces theadministrative burden that is normally associated with server database engines.Caution Be sure to remove your temporary users after you are finished with them so that you do leave them hanging around.