Re: SQLServer Agent problems with windows security -- Help desperately needed.

From: Mads (mav_at_scanvaegt.dk)
Date: 05/18/04 

Date: Tue, 18 May 2004 09:42:49 +0200

Hi Sue.

Thanks for the reply. I have tried this out, and it seems to work.

regs,

Mads

"Sue Hoegemeier" <Sue_H@nomail.please> wrote in message
news:29oia0pkrousq11evncgpv64n0q7sd12i0@4ax.com...
> Some of the errors, issues you are having are related to the
> service accounts not having the required rights and
> permissions set. This can happen when you change the service
> account through the services applet. If you change the
> service accounts using Enterprise Manager, the rights and
> permissions are handled for you. Otherwise you need to
> manage these manually and follow this article:
> HOW TO: Change the SQL Server or SQL Server Agent Service
> Account Without Using SQL Enterprise Manager in SQL Server
> 2000
> http://support.microsoft.com/?id=283811
>
> To clean up what you have now, using Enterprise Manager,
> change the accounts to use Local System. Restart the
> service. Then change the accounts to use the Domain account
> that you want to use for the services. Then restart the
> service.
>
> -Sue
>
> On Mon, 17 May 2004 10:24:42 +0200, "Mads"
> <mav@scanvaegt.dk> wrote:
>
> >Hi There...
> >
> >I have the most peculiar problem.
> >
> >2 servers (A and B), both member server on AD domain.
> >
> >I want to copy a file from A to B, during job execution, using
> >"xcopy c:\file.txt \\Server\share /Y"
> >
> >In order to do this A must ask the AD for permission to write to B. I get
> >the error "Invalid drive specification" because the SQL Server Agent user
is
> >not authorised by the domain.
> >
> >The problem is that, the SQL Server Agent user, infact is a domain user,
> >with all the neccesary rights. The user is a member of the Administrator
> >group on both servers (A and B).
> >
> >I have noticed, that when I change the SQL Server Agent LogOn account to
> >LocalSystem, and back to DOMAIN\User, it (sometimes) gives the error
"Could
> >not determine if User DOMAIN/User has permissions" It is like, it cannot
be
> >verified on the domain, but after some 4 retries, til succeeds.
> >
> >I also get these error in the Security eventlog:
> >"The redirector was unable to initialize security context or query
context
> >attributes."
> >
> >"DCOM was unable to communicate with the computer SERVERNAME using any of
> >the configured protocols."
> >
> > maybe these errors are related ?!
> >
> >All I want to do, really, is to copy a file from A to B. It shouldn´t be
> >rocket science...
> >
> >regs,
> >
> >Mads of Denmark
> >
>

Relevant Pages

  • Re: Newbie question on SQL connection
    ... > Let me educate you about SQL Server security. ... granting permissions to these accounts in SQL ... > maintain its own user accounts, which are separate from domain user ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Sql server 2005 clustered service group
    ... For each clustered service in the instance of SQL Server that you are ... administrator for the names of existing domain groups, ... Note that SQL Server accounts will not be removed from the groups if SQL ... I see with installing SS2005 cluster if forces me to use domain accounts ...
    (microsoft.public.sqlserver.setup)
  • Re: Domain Groups For Clustering Service ???? SQL Server 2005
    ... You need to manually add the service accounts you specify during setup into ... services then just add that to each of the 3 domain groups you create. ... Jasper Smith (SQL Server MVP) ...
    (microsoft.public.sqlserver.clustering)
  • Re: Unable to Backup on Network
    ... The correct permissions will be set if using Enterprise ... Manager to change the service accounts. ... Change the SQL Server or SQL Server Agent Service ... >> Also we have given FULL CONTROL rights to the target directory. ...
    (microsoft.public.sqlserver.security)
  • Re: Newbie question on SQL connection
    ... Let me educate you about SQL Server security. ... The "Trusted Connection" error is associated with the "Windows ... granting permissions to these accounts in SQL ...
    (microsoft.public.dotnet.framework.aspnet)