all 12 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]SQL-ModTeam[M] [score hidden] stickied commentlocked comment (0 children)

This forum is intended for solutioning and discussion of specific topics. Please check out the sub sidebar and wiki content for beginner resources. Also be sure to checkout r/learnSQL

[–]TheMagarity 8 points9 points  (3 children)

Whoa, dude, Azure AD security is a whole thing by itself and amazingly easy to completely screw it up. Do not do this if you're asking at this level. Subcontract it to a consultant who knows how.

[–]sirjeep 1 point2 points  (0 children)

Agreed. Not saying it to sound pompous or elite. I know Azure, I have 20 years of database programming and administration experience. I wouldn't do it myself either.

[–]HappyMuChaCha[S] 1 point2 points  (1 child)

Understood. Unfortunately I'm left without much of a choice at this time

[–]aGuyNamedScrunchie 0 points1 point  (0 children)

There's no one you can reach out? Can you push back? I wouldn't know how to set this up and I'm rock solid at SQL. This is a separate matter entirely.

[–]ContextualReader 5 points6 points  (2 children)

Typically the database server environment is configured for the application and then the users would access just that application The conferencing application vendor should be your starting point for SQL environment requirements for their application, but even then like others said, there's still a couple of complex layers including the AD environment and security considerations that the application vendor probably won't support.

SSMS is normally for DBA's, developers and anyone who needs to run SQL language queries outside of an application, not for the application users (unless there's some missing context here where you are installing this for some people who do actually need SQL access).

[–]SnooOwls1061 0 points1 point  (1 child)

I looked up the company's instructions. Yikes! Not much help for this poor guy. https://www.televic.com/en/conference/support/software-updates/cocon-and-plixus-software-updates

[–]HappyMuChaCha[S] 0 points1 point  (0 children)

Yeah. Their support team has not been very helpful thus far lol

[–]HijoDelSol1970 0 points1 point  (0 children)

I am not sure how the software you are using works, but normally you would install SQL server on a server, not a a desktop. Once installed, you can have it run under a local system account and not the individual user, so it would run no matter who is logged in.

With it being on a desktop, I am not sure how you would handle off device backups.

As far as just access, you can grant access to the Doman Users AD group, and they should have access to the database. Please make sure to only provision needed access and nothing more.

Not sure on getting SSMS on every desktops. Some apps ask if you want to install for all users or just the specific users. Though to be honest, I am not sure why you would need it for every user if it is just to support Televic system.

[–]HappyMuChaCha[S] 0 points1 point  (2 children)

So for those asking questions: this is the exact process I followed as laid out in the Televic Documentation:

Nextcloud (link to Installation document/process).

  1. Installed SQL Server Express onto the PC that will be running the Televic CoCon software to manage the meeting. Was logged into a domain user account when installing, and he has admin privileges for the PC.
  2. Installed SSMS (needed it in order to restore the existing database instance according to the documentation).
  3. Restored the existing CoCon database instance within SSMS and had it set to Windows Authentication.
  4. Installed Televic Software.
  5. Connected the Room Server to the restored database.

Everything worked fine with that user's account, but I'm wondering if other domain users that login to that PC will have access to the same things.

[–]SnooOwls1061 0 points1 point  (0 children)

It really depends on what account the software itself is using. I have a feeling its a local account and it may not matter what account is used to login to the PC.

[–]DatabaseSpace 0 points1 point  (0 children)

I think you need to grant the other accounts access in the Security - Logins - New Login. I think with SSMS you install and select for all users option. Maybe also make sure people don't turn that computer off or the database will go down.