How to give every Remote Desktop User access to SQL Server via a database admin account, not their own credentials

Question

I'm working with ancient software using MS Access components on a Windows Server 2016 (configured as domain controller) Remote Desktop Terminal server (which I cannot circumvent or replace with local installations due to licensing hardware) that requires users to connect to a local SQL Server 2017 Express database.

Normal workflow is this:

1. User logs in to remote desktop with their own user/domain account
2. User starts software and uses it until end of workday, then closes software and remote desktop.

Situation now:

Being logged in as Administrator, I have access to the database and I can start the software and 'log in' on the software (using their software's dialog boxes) with the accounts specified in the database (table 'users'). But since we can't have everyone log in to the machine as Administrator (obviously) this is not a workable solution.

Back in the old days...

Back in 2009 when I did the installation of the old Windows 2008 R2 server in 2009 I remember installing SQL Server Express 2008 (?) and being able to run it as a sa user. This caused all connections to be run under this user as well, giving access to the database without problems by each and every (domain) user.

My problem now:

I can't seem to change the access to the database from user-based to a specific fixed user OR the administrator account for that matter. The access to the database is ALWAYS using the credentials of that of the USER.

I only see 2 ways out of this:

1. I set up some kind of sa -user replacement and run the database as that specific user account.
2. I give the domain group Personel access to the database in one way or the other.

My question for now:

Which option is best and/or where should I start looking for a solution?

Answer 1

In order to give every Remote Desktop User access to SQL Server via a database admin account, right click on the Server name and select properties. In the Select a page section of the Server properties dialog click Connections. Check the box next to "Allow remote connections to this server". Click OK to close the server properties dialog.