How to: Allow Service Broker Network Access by Using Windows Authentication (Transact-SQL)
To allow another instance to send messages using Windows Authentication for transport
security, you create a user in the
database for the startup service account for the other
instance.
-
Create a login for the startup service account for the other instance.
-
Grant that user
permission to the Service Broker endpoint.
Once access is configured in each instance, then communications between the two instances
use Service Broker transport security when the transport security configuration option is set in
both databases.
7
Note
If both instances run as the same domain account, then the instances can always
communicate using Windows Authentication for transport security. If the instances run as
the
account, the login name is MachineName$, and Kerberos must be
available on the network to use the machine account.
master
CONNECT
LocalSystem
USE master
;
GO
CREATE
LOGIN [
DOMAIN
\
user
]
FROM
WINDOWS;
GO