Preparations for the ADS Authentication
Table of Contents
If the ADS authentication (Windows authentication) has to be set up, the following settings have to be performed first.
A user that is set up through this procedure, is used to create the Empirum databases (location, tables, procedures, and triggers).
Domain Controller
Create a user in the ADS, via which you wish to log on to Matrix42 DBUtil or to the Matrix42 Management Console.
Creating a user in the ADS:
SQL-Server
Security Settings
The local security settings of the SQL Server have to be modified accordingly, for the Matrix42 DBUtil to be able to remotely access the registry database.
Click on Start > Run... > and type %SystemRoot%\system32\secpol.msc /s, or open the security settings via Start > Settings > Control Panel > Administrative Tools > Local Security Policy.
Double-click on Network access: Registry paths and subpaths, which can be accessed by other computers, and in the opened window enter Software\Microsoft SQL Server.
Computer Administration
The user created in the ADS has to belong to the group of local administrators on the SQL Server.
Click on Start > Run... and type %SystemRoot%\system32\compmgmt.msc /s or open the Computer Management via Start > Settings > Control Panel > Administrative Tools > Computer Management.
Right-click on the Administrators group and add the user you created in the ADS.
Settings
The user created in the ADS also has to be entered as user in the SQL Server.
In the SQL Server the settings are performed analog for this.
Open the Microsoft SQL Server Management Studio.
Add the ADS user via the Browse... button.
On the upper left side, change to the Server Roles tab.
Select the Server role public and sysadmin and confirm the settings with OK.
If you want to use a service user that is different from the user used for creating a location, this service user must be created in the DBUtil user administration with the EMP_SERVICES role.