RE: SQLServer Agent problems with windows security -- Help desperately

From: Raoul Laoyan (Laoyan_at_discussions.microsoft.com)
Date: 08/02/04 

Date: Mon, 2 Aug 2004 10:49:03 -0700

I experienced the same problem. It was Event 3034 MrxSmb. I couldnt get the SQL Executive account/service to reach across the network, but if I interactivly logged on as the account it can. The only solution I found was to reboot the server and try the operation again.

It may have been from moving this Windows 2000 server from an NT 4.0 domain into an AD domain.

"Mads" wrote:

> Hi There...
>
> I have the most peculiar problem.
>
> 2 servers (A and B), both member server on AD domain.
>
> I want to copy a file from A to B, during job execution, using
> "xcopy c:\file.txt \\Server\share /Y"
>
> In order to do this A must ask the AD for permission to write to B. I get
> the error "Invalid drive specification" because the SQL Server Agent user is
> not authorised by the domain.
>
> The problem is that, the SQL Server Agent user, infact is a domain user,
> with all the neccesary rights. The user is a member of the Administrator
> group on both servers (A and B).
>
> I have noticed, that when I change the SQL Server Agent LogOn account to
> LocalSystem, and back to DOMAIN\User, it (sometimes) gives the error "Could
> not determine if User DOMAIN/User has permissions" It is like, it cannot be
> verified on the domain, but after some 4 retries, til succeeds.
>
> I also get these error in the Security eventlog:
> "The redirector was unable to initialize security context or query context
> attributes."
>
> "DCOM was unable to communicate with the computer SERVERNAME using any of
> the configured protocols."
>
> maybe these errors are related ?!
>
> All I want to do, really, is to copy a file from A to B. It shouldn´t be
> rocket science...
>
> regs,
>
> Mads of Denmark
>
>
>

Relevant Pages

  • Re: 3034 Print Error
    ... The redirector was unable to initialize security context or query context ... >>as network printer on the server. ...
    (microsoft.public.win2000.general)
  • Re: transactional replication failed
    ... Because my TEST server is not for test only (sometimes it is in use to run ... Stop SQL server, ... Run script to register dll files ... SQL server agent - success ...
    (microsoft.public.sqlserver.replication)
  • RE: Error trying to execute a sp on a remote server with an SQL agent
    ... SQL Server Agent Job Fails When the Job Uses a Linked ... Microsoft SQL Server Support ... Error trying to execute a sp on a remote server with an SQL ...
    (microsoft.public.sqlserver.connect)
  • Re: Execute Persmission denied on object sp_OACreate
    ... It is strange though -- in my dev server I did not have to make the owner be ... >> Does Sql Server Agent recognize that a user does not have SysAdmin ... >> priviliges and automatically invoke the proxy account to execute these ... >> proxy account to use in the Job Systems tab of SQL Server Agent ...
    (microsoft.public.sqlserver.security)
  • Re: Run process on Server remotly
    ... why don't you take advantage of functionality provided by SQL Server Agent ... and define a job running your script in the security context of the proxy ... the script on the remote computer. ...
    (microsoft.public.windows.server.active_directory)