SQL Server 2008 provides two methods for creating database user accounts - Windows authentication or SQL Server authentication. In Windows authentication mode, you assign all database permissions to Windows accounts. This has the advantage of providing a single sign-on experience for users and simplifying security management. In SQL Server (mixed mode) authentication, you can still assign rights to Windows users, but you may also create accounts that exist only in the context of the database server. Here's how to add a database login.
Time Required: 5 minutes
- Open SQL Server Management Studio.
- Connect to the SQL Server database where you would like to create a login.
- Open the Security folder.
- Right-click on the Logins folder and select New Login.
- If you would like to assign rights to a Windows account, select "Windows authentication". If you would like to create an account that exists only in the database, select "SQL Server authentication".
- Provide the login name in the text box. You may use the Browse button to select an existing account if you chose Windows authentication.
- If you chose SQL Server authentication, you must also provide a password (preferably a strong one!) in both the Password and Confirmation text boxes.
- Customize the default database and language for the account, if desired, using the drop-down boxes at the bottom of the window.
- Click OK to create the account.
- Be sure to use a strong password if you are creating a SQL Server login.
- If you want to remove an existing account (using either SQL Server authentication or Windows authentication), right-click on the account in the Logins folder and select Delete.
- Creating an account does not create database permissions. The next step of the process is to add permissions to the account.
- SQL Server authentication is only available if you have selected mixed mode authentication for your SQL Server instance.
What You Need
- SQL Server Management Studio