Sayeed, I am not an expert on this topic, but I would like to share my view with you. As is also evident from your mail oracle user when working through oracle gui tools like oem and dbca etc expects the oracle to be a direct member of the dba group on the server machine and not through another group or role. This is why when you made your DBGroup a member of NT System Admin you gave it same level of privileges as to oracle dba group on the machine. Somehow, it looks like when another group is made a part of dba group in the NT system not all administrative rights to the server are available to the added group. The added group lacks some system privilege(s) which oracle needs if creating a database through oem or dbca or another gui tool. I am not sure, but it may have something to do with remote control/access of the server machine.
As regards your second question whether a database can be created through the scripts run on sqlplus. The answer is yes. And I am pretty sure that it does not expect you the same level of machine access rights as when you try to do it through oracle's gui tools described above. Just try it.
Gurmohan
www.freemath.info
-----Original Message-----
From: Saeed K. Rahimi
[mailto:oracledba-ezmlmshield-x27924890.[Email address protected]
Sent: Saturday, July 30, 2005 12:47 PM
To: LazyDBA Discussion
Subject: Creating a DB
Hello,
We have installed Oracle 10g at our University and running into a problem with students' access rights. Here is the problem:
We create a NT user group (called DBgroup) and add students in our DBA class to this group. Then we add the DBgroup to Oracle's DBA group using the "Administration Assistant for Windows NT". This is to help students have DBA access to Oracle once they login. When a user of this group logs in and tries to create a database (using the "database configuration assistant" GUI tool), we get an error that the user does not have write access to the drive where the db files are to be created.
We can get around this problem by making the DBgroup a member of NT system admin. That has the problem of giving students ultimate access to all resources on the server which we do not want. Is there a way around this? What are we doing wrong? As mentioned, we use the "database configuration assistant" to do this. Can this problem be solved using scripts and running the creation script from SQL PLUS when the user connects as SYSDBA? Is there anything else that the script should have in addition to "create database MyDB" leaving everything else as default?
Any help is appreciated.
Regards,
---------------------
Saeed Rahimi
---------------------
--------
website: http://www.LazyDBA.com
Please don't reply to RTFM questions
Oracle documentation is here: http://tahiti.oracle.com
To unsubscribe: see http://www.lazydba.com/unsubscribe.html
To subscribe: see http://www.lazydba.com
By using this list you agree to these terms:http://www.lazydba.com/legal.html
Oracle LazyDBA home page