I have an application that connects to a SQL Server 2000 database using Trusted connection. Authentication is acheived via user's Windows NT login passed to the database.

When using the following connection string, the data in the database can be seen:-
Conn="DRIVER={SQL Server};SERVER={MULTIMEDIA2};DSN=pms;DATABASE={cab inetoffice};uid=;pwd=;

However, IIS 6.0 has SPN set, therefore I changed the connection string to:-
Conn="Provider=SQLOLEDB.1;Data Source=MULTIMEDIA2;Initial Catalog=cabinetoffice; Integrated Security=SSPI; Persist Security Info = False;"

But now I can't see the data in the database. Eh??

Nikki.

There is allot of information on this one everywhere you look on the net as well as this forum. Check out:

http://p2p.wrox.com/topic.asp?TOPIC_ID=450



Wind is your friend
Matt

True,

But what is happening here is that a Windows GROUP is created. SQL Server is on one machine and IIS is on another. You don't need to add the login IUSR_machine name in Sql. SQL will pick up the user from the Windows Group in the point above.

So why isn't this working?

Where is the Group defined? On the SQL Server?

And where did you add the IUSR account to the group?

The IUSR is a *local* account, and cannot be used on a different server directly. You'll need to set up a mirrored account, or use a different (domain) account for IIS.

Cheers,

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
While typing this post, I was listening to: This Mess We're In by P J Harvey (Track 7 from the album: Stories From The City, Stories From The Sea) What's This?

Thanks, that was the right solution.