Home Forums Discussions Problems SQL Server Connection Error (Domain network issue)

I set up a network with a domain. I am able to run AC from the client machines with an administrator user account but when I do so as a domain user I get a "SQL Server Connection Error".

The domain users have been given all permissions for the folder that has Amazing charts installed on the server.

What could be the issue? Am I supposed to grant permissions related to the SQL service. If so what should I do?

No, you don't need to grant permissions for SQL itself. They just have to have permissions for that folder. First test.

As an local admin user, can you browse to the AC folder, make a text file, write to the text file, save it, then delete it.

Sorry for the stupid question: But do the users have share permissions or NTFS permissions. Let me know, then I will give you some more ideas. Also, try adding Authenticated Users and not just domain users. If you want to be a little less secure, you can put in "Everyone."

Is there an error code when you get the error?

Bert - here are are couple of more details that may give you a few clues..

1. When I installed the 'main' AC install on the server... I changed the default path to the D: drive. I found that AC is installed on the Program Files folder in the D: drive, but SQL Server Express is installed in the Program Files folder on the C: drive.

2. I am using both share permissions (created a share and mapped a drive for the client machines)and NTFS permissions for the folders on the share.

3. I have 2 groups - Staff and Management. The management users are also included in Domain Administrators (just two of us). The Users in the Staff group are 'Domain Users'. Not sure what 'Authenticated Users' mean.

4. The Staff has Read/Write/Modify permissions on the Program Files folder (that has AC). Also added Read/Write/Modify permissions for the Staff group on the SQL Express Folders located on the C: drive.

5. When I log into the client machines with a user_id associa - I have no problem running AC. When I log-in with the staff user_id I get a 'SQL Server Connection error'.

I used to up in a similar way. But, I found in the end, it is just easiest to install the whole thing on the data drive. It keeps this type of error from occurring.

First thing I would do would be to go the folder which contains the SQL databases that you are able to access as a domain admin. Go to the AmazingCharts.xml file and open with Notepad or Wordpad and make note of the path it has for the SQL Server databases. Also make sure that the folder that does NOT have the databases it in it does NOT have an AmazingCharts.xml file. If so, just rename it to .old.

Do you find that the mapped drives work better? Have you tried giving the domain users full control on both the shares and the permissions. We can always work backwards, taking everything out of the equation. Firewall, permissions, shares. Also, how do you have the inherited permissions set up? By default, they should both be unchecked, so it is probably correct.

Domain users have access to all shares they are given rights to on that user domain. Authenticated users are can access those shares plus available shares on all other trusted domains. I doubt it is an issue.

Given that it is Sunday, if the issue is still not fixed by Monday morning, the easy way out is to make everyone domain admins. I know... But, at least you know that anything they do to screw things up would be accidental, and to be honest, we screw more things up on purpose than they do accidentally.

sbc,

I keep finding ways that could have screwed it up, but then I wonder how it would have gotten that way. But, if you go to properties on your AmazingCharts.xml file, check your permissions in there. If you don't have something equivalent to domain users such as authenticated users, domain users or everyone, you can't access AC. It didn't give me the error message though.

Finally, the databases in the SQL Engine itself comes into play, but that would be highly unlikely to be a problem. I think it grabs all the users for full permissions during install.

Bert - thanks for your suggestions. I will try some of the things you suggested tomorrow. I am setting up a new office for my wife - btw you spent time with her at ACUC - during the 1-1 training (Dr. Ritu Chitakki). So I don't have the pressure of having it up and running on Monday!

At least I know that my last resort will be to make the staff domain admins - but I don't want to do so to keep them away from some of the folders such as HR, Accounting etc.

True, but the beauty is they probably don't know how to get to them anyway.

Bert - the AmazingCharts.xml file on the D:drive has this..I see not reference to the SQL databases on the C: drive.... but a reference to the an .mdf file..


<?xml version="1.0" encoding="utf-8" ?>
- <AmazingCharts>
- <Settings>
<LocalDbPath>D:\Program Files (x86)\Amazing Charts\AmazingCharts.mdf</LocalDbPath>
<SqlPortNumber>61067</SqlPortNumber>
</Settings>
</AmazingCharts>

OK, I am starting to put it together little by little. I was mistaken about your C: drive. Your actual SQL Server is on the C: drive. I wouldn't worry about that. That is just what your user databases are connected to. There are permissions there, too, but you won't need to worry about them.

You .xml file is fine. It just shows that your database is located in the 32-bit Program Files. I am a little confused, because generally, be default, Program Files x86 and Program files for the 64-bit programs would be located on the C: drive. And, by default, applications get installed into one or the other.

It appears like when the default path to install the program came up, it appeared like C:\Program Files x86\Amazing Charts, and you changed the C to a D, which would be fine and would put your databases on your data drive.

If you right-click on the same .xml file from above and check its permissions, does it have your staff user groups on it?

One thing when troubleshooting it to make things as simple as possible. I cannot see what is happening, but it sounds as though users are considered domain users by virtue of being in the staff group. You could just log in directly as a user and make sure that user has permissions.

Or maybe put the group "Everyone" in the share and in the NTFS permissions and make a test user with user permissions. Log into a computer with the test user. It should be able to log into Amazing Charts.

You are right - when the default path to install the program came up, C:\Program Files x86\Amazing Charts, I changed the C to a D.

I have the users (that are in the Staff group) members of the Domain Users. The users in the management groups are also members of the Domain Admins. No problem running AC from any client using management user_ids (also domain admins). When I add a staff user_id as a member of the Domain Admin .... no problem as well.

I have 'Everyone' with Full control for the Amazing Charts Folder (and the xml file). Even tried adding Domain Users by right clicking the Folder (and File) and giving Full Control permission. No luck. Simply cannot connect to the database without being part of the Domain Admin!

I fixed the issue.... found that the AmazingCharts.mdf filed did not have Domain Users permissions enabled!

http://www.amazingcharts.com/ub/ubbthreads.php/topics/22866#Post22858

Finally, the databases in the SQL Engine itself comes into play, but that would be highly unlikely to be a problem. I think it grabs all the users for full permissions during install.

Glad you got it fixed!