Re: SQL2k Sqlagentproxy fails to logon

From: Richard Waymire [MS] (rwaymi_ms@microsoft.com)
Date: 06/28/02 

From: "Richard Waymire [MS]" <rwaymi_ms@microsoft.com>
Date: Fri, 28 Jun 2002 08:48:45 -0700

HI Chris,

That sounds like the password for the proxy account is bad... 

--
Richard Waymire, MCSE, MCDBA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Chris Wood" <chris.wood@gov.ab.ca> wrote in message
news:OStARUrHCHA.2096@tkmsftngp12...
> Sue,
>
> I am trying to add an account that SQL Agent will use to run jobs owned by
> non-admins and get
> Unable to set the SQL Agent proxy account because of the reason listed
> below, 'Error executing extended stored procedure: Specified user can not
> login'.
> Is this because the account entered does not have the correct password
> entered or the permissions of the account running SQL Server?
>
> Thanks
>
> Chris Wood
> Alberta Department of Energy
> CANADA
>
> "Sue Hoegemeier" <Sue_H@nomail.please> wrote in message
> news:74omhu0tuga22v8d73617f9i0s70ehf0vk@4ax.com...
> > I think your permissions are probably not configured
> > correctly for the SQL Server service account.
> > I've seen someone else recently hit the Access denied with
> > xp_sqlagent_proxy_account. The problem was due to the SQL
> > Server account not running under a Windows
> > administrator account to read or set the SQL Server Agent
> > proxy account. It's not sa being denied permissions to
> > execute the procedure but rather your SQL Server service
> > account that does not have permissions to read the windows
> > accounts.
> > You get the 997 error when information can't be retrieved
> > about the proxy account as well as when the proxy account
> > isn't configured correctly. But I think you probably need to
> > start with the permissions for the SQL Server service
> > account first.
> >
> > -Sue
> >
> > On Thu, 27 Jun 2002 11:50:27 -0700, "Doug Little"
> > <dlittle5@ford.com> wrote:
> >
> > >Hi,
> > >We're running sql2k sp2 on w2k sp2 where we have a number
> > >of jobs that have been running fine for over a year.
> > >
> > >Something recently changed where all jobs that use
> > >OS Commands (CMDEXEC) now fail with the message "A problem
> > >occurred while attempting to logon as the Windows
> > >user 'SQLAgentCmdExec': The parameter is incorrect.  The
> > >step failed."
> > >
> > >Executing cmd_exec 'exec xp_cmdshell 'dir c:*.* /ad'
> > >directly from a non-sa account gets us 'Msg 50001, Level
> > >1, State 50001. Xpsql.cpp Error 997 from GetProxyAccount
> > >on line 472"
> > >
> > >A review of the sqlagent.log file has an interesting
> > >message '[298] SQLServer Error: 8198 Could not obtain
> > >information about win nt grp/usr 'fordna1\cksinfra'.
> > >sqlstate 42000 (ConnIsLoginSysAdmin)'
> > >
> > >We have the sqlagent set use use a proxy domain account
> > >(which is fine, not locked, expired,etc)
> > >
> > >The sa can't execute the xp_sqlagent_proxy_account 'get'
> > >to validate the proxy account info. He gets 'access is
> > >denied'. I asked him to grant himself privledges and try
> > >again. Hopefully that will show a glaring mistake.
> > >
> > >But, until then has anybody seen this before and can you
> > >offer diag tips/resolutions.
> > >
> > >Thanks
> > >Doug little
> > >313-594-2706 dlittle5@ford.com
> >
>
>

Relevant Pages

  • Re: Execute Persmission denied on object sp_OACreate
    ... If so what access and permissions. ... The account is a windows account. ... One method to test permissions is to log in to your SQL Server box using the ... >>> SA account password and gaining access to the database. ...
    (microsoft.public.sqlserver.security)
  • Re: Specifying a logon account for SQL Server 2005 services
    ... As I mentioned using a Windows domain account with no permissions is the ... configured only for very specific server and memory configurations. ... account to use while installing SQL Server, will SQL Server give this account ...
    (microsoft.public.sqlserver.security)
  • Re: simple security question (need refresher)
    ... If IIS is configured for anonymous access and you connect to SQL Server ... using Windows authentication, the IIS anonymous account ... this account or roles that this account is a member of. ... Permissions are required only on objects directly accessed by the ...
    (microsoft.public.sqlserver.security)
  • Re: "Access denied" with xp_cmdshell (!)
    ... But problem is that I have tried to give for that account full control ... restart Sql Server for those permissions to take effect. ...
    (microsoft.public.sqlserver.security)
  • Re: "Access denied" with xp_cmdshell (!)
    ... Does the command work fine if you execute it from a prompt started as the ... service account? ... Have you checked both the permissions for the share and for the file? ... restart Sql Server for those permissions to take effect. ...
    (microsoft.public.sqlserver.security)