SQL Server 2008 R2 recognizes a domain account as a SQL Server account After migrating from SQL Server 2000 to SQL Server 2008 R2, we have a few domain accounts that appear to the new server as SQL Server accounts. These accounts can SELECT from tables in the database they are assigned to, but they are not able to write to them as they could under SQL Server 2000. The SQL Server 2008 R2 log shows that at least one account failed at its attempt to INSERT into a table with this message (excerpt):


  Attempting to use NT account name with SQL Server
  Authentication....


This specific account had no problems doing its thing on SQL Server 2000, and nothing has changed at the account level, but the database it is assigned to "thinks" this account is a SQL Server account.  Has anybody experienced this issue and resolved it?
The question is rather vague, or at least to me it is.

You state you had new user accounts 'appear' when you migrated, but then state that 'they can only SELECT and can't write to the database like they used to in 2000'.  Did these same user accounts exist in the 2000 instance or did they appear only after creating 2008?  Were they created by someone or did they literally just appear, like the service users typically do (such as DOMAINNAME\NTAUTHORITY).

Also when you migrated over, did you create new domain controllers?  If so, your user SIDs no longer match.  Did you rename your domain?  If so, your sql server users are still referenced by the old domain which means you want to script their permissions out by right clicking on them, script user as, create.  Then change the user name to reference the new one.  Make sure you then include this user in all the databases it needs access to.

If you did in fact create a new domain, make sure you update your internal SQL Server name to reference the new Fully Qualified Host Name:
http://blogs.msdn.com/b/cindygross/archive/2010/02/11/how-to-rename-sql-server.aspx

There's a lot of unknowns, please further clarify. Thanks!