Scott -
This is how I do this in NT:
1) Create a local user
2) Add that user to the Administrator Group
3) Log out of the the larger Domain
4) Log into the local Domain (just the PC itself) as the local user
5) Configure DB2
6) Log out of the local domain and back into the larger one
Hope this helps -
Brian
-----Original Message-----
From: McLeod, Scott [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 03, 2001 9:42 AM
To: [EMAIL PROTECTED]
Subject: DB2EUG: SYSADM assignment on NT Question
Sorry for the rash of questions lately everyone. After 7 years using UDB on
AIX we just moved to a few NT servers and the suble differences are really
starting to tick me off.
My latest headache is setting up a global security for all the DBA's. I
keep going around and around with our security administrator on how to
configure this. I created a new NT domain group called DB2UDBDBA and myself
and sevel other DBA's are members of that group. I want to set that group
as sysadm with the command: "db2 update dbm cfg using SYSADM_GROUP
DB2UDBDBA". But I get a message that says Im not authorized to make the
change.
I told the security administrator that I need to be in the local
administrators group on each server to get the SYSADM authority I need to
change sysadm. His response is this:
"By your account being in the Global Group, and that Global Group being in
the Local Administrators Group, you have Local Administration access to the
servers from and NT perspective. If DB2-4-NT is not using NT bases security
calls, then we need to find out what they are using to determine who has the
ability to issue DB2 Commands. I would not be surprised if we need to
create a LOCAL account for you on the server and use pass through
authentication.
Can anyone tell me if I do in fact need a local account in the local
administrators group to issue this command? Is there a better way to pursue
this than the way I setting it up?
> TTFN and Hold Fast!
> Scott McLeod of MacLeod
> Best Buy, Inc.
> Sr. Database Architect
> 7750 Flying Cloud Dr.
> Eden Prairie, MN 55344
>
> (612) 324-0031 (voice)
> (612) 324-0828 (fax)
>
> [EMAIL PROTECTED]
>
>
=====
To unsubscribe, send 'unsubscribe' to [EMAIL PROTECTED]
For other info (and scripts), see http://people.mn.mediaone.net/scottrmcleod
=====
To unsubscribe, send 'unsubscribe' to [EMAIL PROTECTED]
For other info (and scripts), see http://people.mn.mediaone.net/scottrmcleod
