RE: 0x80004005 - you need permission to view its data

From: Sophie Guo [MSFT] (v-sguo_at_online.microsoft.com)
Date: 09/19/05 

Date: Mon, 19 Sep 2005 10:37:14 GMT

Hello,

Please refer to the following information in the article 319723:

-------------------------
Note If you are using SQL Server failover clustering, you must register a
SPN without the port number and another SPN with the port number. With a
typical, non-clustered computer that is running SQL Server, you only have
to register the SPN with the port number. However, if you have an
additional SPN without the port number, it will not cause any problems with
non-clustered computers.

-------------------------------

Since you use non-clustered computer that is running SQL Server, you only
have to register the SPN with the port number. However, please notice that
the spn should look like the following:

MSSQLSvc/MySQLServer.MyDomain.com:1433

That is, in you case, it may look like this:
MSSQLSvc/mdtdpa01.xxx.yyy.local:1433 instead of
mssqlserver/mdtdpa01.xxx.yyy.local:1433

where mdtdpa01 is the computer name which installs the SQL server instance,
1433 is the port SQL is listening.

Therefore you may need to use

setspn -D mssqlserver/mdtdpa01.xxx.yyy.local:1433 mdtdpa01

to delete the wrong spn and re-create a correct one:

setspn -A MSSQLSvc/mdtdpa01.xxx.yyy.local:1433 < doamin account which is
SQL server startup account >

I hope the information is helpful.

Sophie Guo
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: Unable to use Kerberos Delegation from IE6 --> IIS 5.0 (asp.net)--> SQL 2000
    ... No problem with this configuration except SQL Server isn't smart enough to register all the ports in the Active Directory. ... the only registered Service Principal Name was for port 1433. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to use Kerberos Delegation from IE6 --> IIS 5.0 (asp.net)--> SQL 2000
    ... No problem with this configuration except SQL Server isn't smart enough to register all the ports in the Active Directory. ... the only registered Service Principal Name was for port 1433. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: connect the SQL Server in different domains
    ... Generally SPN should be registered in the following format ... But to enable Kerberos protocol in this inter domain scenario, ... need to register an SPN using the NETBIOS name ... connect the SQL Server B in the other domain and vise versa. ...
    (microsoft.public.sqlserver.connect)
  • Replication to server with different Port
    ... I have a SQL server running on a remote location that has a different port ... to register I have to specify the port number as well eg. ... Enterprise Manager on my machine and on setting up the subscriber I am able ...
    (microsoft.public.sqlserver.replication)
  • Re: Unable to register 2nd SQL server instance.
    ... I am able to register the default and 2nd ... > SQL server does not exist or access is denied. ... > 1433, stop/start the services, then reboot, and then change the port to ... > start and stop services and reboot. ...
    (microsoft.public.sqlserver.setup)
Quantcast