Jason belings to a Windows group names Sales that has been grated access to SQL server via a Windows group account SQL Server. Jason should not have access to SQL Sever, but he needs the permissions afforded the Sales group on other servers. How can you remedy this?
(The best way to accomplish this is to create a separate SQL login for Jason and deny it access. This way Jason can still be a member of the Sales group, with all of the associated access rights, but not get access to SQL Server.)