Have created a linked server to active directory from SQL Server but getting a permission denied error when I try to query anything.
Under the security options for the linked server I have specified the connection to use a domain account which can query AD from powershell.
Should this account have any special permissions?
EDIT:
This is the error message I'm receiving from SQL
The OLE DB provider "ADsDSOObject" for linked server "ADSI" reported
an error. The provider indicates that the user did not have the
permission to perform the operation.
Best Answer
As you discovered using Powershell, unless changed, normal, authenticated, non-admin user accounts have the right to search & Read AD. No reason to believe this would be different from a SQL server. Sounds like there is a config issue with the SQL or script.