1.What permisson have you configured on the sql server that allows random users in the network to be able to access the sql server?
2. How are they accessing the sql server?
3. What do you mean when yoi say when they login to their microsoft account, which microsoft account.
4.when they were able to access sql server what were they logged in into?
You can use Ubuntu Server/Samba as domain server