SQL2k Sqlagentproxy fails to logon

From: Doug Little (dlittle5@ford.com)
Date: 06/27/02 

From: "Doug Little" <dlittle5@ford.com>
Date: Thu, 27 Jun 2002 11:50:27 -0700

Hi,
We're running sql2k sp2 on w2k sp2 where we have a number
of jobs that have been running fine for over a year.

Something recently changed where all jobs that use
OS Commands (CMDEXEC) now fail with the message "A problem
occurred while attempting to logon as the Windows
user 'SQLAgentCmdExec': The parameter is incorrect. The
step failed."

Executing cmd_exec 'exec xp_cmdshell 'dir c:*.* /ad'
directly from a non-sa account gets us 'Msg 50001, Level
1, State 50001. Xpsql.cpp Error 997 from GetProxyAccount
on line 472"

A review of the sqlagent.log file has an interesting
message '[298] SQLServer Error: 8198 Could not obtain
information about win nt grp/usr 'fordna1\cksinfra'.
sqlstate 42000 (ConnIsLoginSysAdmin)'

We have the sqlagent set use use a proxy domain account
(which is fine, not locked, expired,etc)

The sa can't execute the xp_sqlagent_proxy_account 'get'
to validate the proxy account info. He gets 'access is
denied'. I asked him to grant himself privledges and try
again. Hopefully that will show a glaring mistake.

But, until then has anybody seen this before and can you
offer diag tips/resolutions.

Thanks
Doug little
313-594-2706 dlittle5@ford.com

Relevant Pages

  • Xerox DocuTech problems
    ... Kudos to Xerox for setting a new standard of incompetence. ... The Scanner is controlled by an Intel box ... The scanner sends jobs via ftp to the printer. ... The NT box Administrator account password is "administ" and is ...
    (Vuln-Dev)
  • Xerox DocuTech problems
    ... Kudos to Xerox for setting a new standard of incompetence. ... The Scanner is controlled by an Intel box ... The scanner sends jobs via ftp to the printer. ... The NT box Administrator account password is "administ" and is ...
    (Bugtraq)
  • Re: Questions over questions
    ... >> defeating the 30 second limit I'd be terminating your account as I'd deem ... > I've built a small perl daemon (php too old) which runs php jobs ... > I would really like to be able to spawn offline jobs from a web page ...
    (comp.lang.php)
  • Re: sql agent job owner best practice
    ... We run "production" jobs under service accounts that we set up with the ... These accounts are granted or denied rights to data just ... a sysadmin or some other too powerful account. ...
    (microsoft.public.sqlserver.security)
  • Re: MVBase Spooler Help
    ... Yes, I've been around for over 25 years in Pick and I do know the why's and wherefores for setting up different User Names for each user and different spool Que's for different jobs... ... IF there was an easy way to change the Account Name on the "fly" with a command or user exit or etc.. ... Brian Speirs ... brian at rushflat dot co dot nz. ...
    (comp.databases.pick)