Re: SQLServer Agent problems with windows security -- Help desperately needed.

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 05/18/04 

Date: Mon, 17 May 2004 19:10:39 -0600

Some of the errors, issues you are having are related to the
service accounts not having the required rights and
permissions set. This can happen when you change the service
account through the services applet. If you change the
service accounts using Enterprise Manager, the rights and
permissions are handled for you. Otherwise you need to
manage these manually and follow this article:
HOW TO: Change the SQL Server or SQL Server Agent Service
Account Without Using SQL Enterprise Manager in SQL Server
2000
http://support.microsoft.com/?id=283811

To clean up what you have now, using Enterprise Manager,
change the accounts to use Local System. Restart the
service. Then change the accounts to use the Domain account
that you want to use for the services. Then restart the
service.

-Sue

On Mon, 17 May 2004 10:24:42 +0200, "Mads"
<mav@scanvaegt.dk> wrote:

>Hi There...
>
>I have the most peculiar problem.
>
>2 servers (A and B), both member server on AD domain.
>
>I want to copy a file from A to B, during job execution, using
>"xcopy c:\file.txt \\Server\share /Y"
>
>In order to do this A must ask the AD for permission to write to B. I get
>the error "Invalid drive specification" because the SQL Server Agent user is
>not authorised by the domain.
>
>The problem is that, the SQL Server Agent user, infact is a domain user,
>with all the neccesary rights. The user is a member of the Administrator
>group on both servers (A and B).
>
>I have noticed, that when I change the SQL Server Agent LogOn account to
>LocalSystem, and back to DOMAIN\User, it (sometimes) gives the error "Could
>not determine if User DOMAIN/User has permissions" It is like, it cannot be
>verified on the domain, but after some 4 retries, til succeeds.
>
>I also get these error in the Security eventlog:
>"The redirector was unable to initialize security context or query context
>attributes."
>
>"DCOM was unable to communicate with the computer SERVERNAME using any of
>the configured protocols."
>
> maybe these errors are related ?!
>
>All I want to do, really, is to copy a file from A to B. It shouldn´t be
>rocket science...
>
>regs,
>
>Mads of Denmark
>

Relevant Pages

  • Re: "Requested registry access is not allowed" and Web Service cal
    ... web service is called from a desktop application that requires a user ... workstation, they have less rights than me, and the program as well as ... sql server would take on the rights of that user, ... procesudes - no generic accounts that allow access to all stored procs. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Security Additions Disappearing
    ... Are the delegate accounts in AD? ... There is a known case where permissions get reset. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... this Support account is only a member of Domain ...
    (microsoft.public.exchange2000.admin)
  • Re: Share and NTFS permissions not working as supposed
    ... Leave the default permissions for system and administrators. ... Create the User directory in the Accounts directory. ... With the to "accounts group" selected, ... but full rights to the Users directory. ...
    (microsoft.public.windows.server.general)
  • Re: Newbie question on SQL connection
    ... > Let me educate you about SQL Server security. ... granting permissions to these accounts in SQL ... > maintain its own user accounts, which are separate from domain user ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Sql server 2005 clustered service group
    ... For each clustered service in the instance of SQL Server that you are ... administrator for the names of existing domain groups, ... Note that SQL Server accounts will not be removed from the groups if SQL ... I see with installing SS2005 cluster if forces me to use domain accounts ...
    (microsoft.public.sqlserver.setup)