My 3rd party backup product uses a non-service account login to perform tasks. If the account that it uses has been granted Perform Volume Maintenance tasks on the server, will it use IFI when restoring? Or do I need to have it use the service account login specifically to benefit from that?
View 2 Replies
I have been trying to use Instant File Initialization feature on one of the servers which is a part of DMZ. One of the requirement, I understand, for that feature to work is to have SQL Server configured to use NT Authentication. My server is running in Mixed authentication, using local administrator account. I understand I should practice principle of least privilege, but question at hand is how I could use instant file initialization when SQL Server is not using Domain account.
Thanks,
Asaf
Do we still need the below service accounts in SQL 2008+ version even if we have proper SQL service accounts added in the logins?
[NT AUTHORITYSYSTEM]
[NT ServiceMSSQLSERVER]
[NT SERVICEReportServer]
[NT SERVICESQLSERVERAGENT]
[NT SERVICESQLWriter]
[NT SERVICEWinmgmt]
I setup SQL Server 2012 on Windows Server 2012 with the service accounts in the local Administrator group, but now that I'd like to remove the accounts from this group I'm finding they don't have the appropriate access to the network storage. notes on setting the per-service SID's for SQL (SQL Engine, Analysis Services, Reporting Services, and Agent Service) so they can read the Data, Log, and TempDB mount points?
View 2 Replies View RelatedI am currently hardening our SQL 2012 (with AlwaysOn Availability Groups) environment. Both the SQL service and agent account are using service accounts (only domain user). SQL browser service is disabled. Permissions to all roles are handled by using domain groups.
Currently a lot of (default) NT Service accounts are listed (some with sysadmin privileges). Are there accounts that can be removed?
I installed the evaluation version of SQL Server 2005 to my Windows XP machine. Everything has worked well. Now I have problem. I installed the reporting service to test the web reporting.
In the Report service configuration manager I get three errors:
The Web Services Identity indicator is red and pushing Apply button gives the error:ReportServicesConfigUI.WMIProvider.WMIProviderException: An unknown error has occurred in the WMI Provider. Error Code 8007056B
Pushing Initialization button gives the message: There was an error while switching panels. The most likely cause is an error retriewing WMI properties. the exeception details are: An error occured when attempting to connect to the report server remote procedure call (RPC) end point. Verify that the Report Server Windows service is running and then try the operation. Execption 800706B3.
Server Status Indicator is also red. Pushing the Start Button gives the following message: System.ServiceProcess.TimeoutException: Time out has expired and the operation has not been completed. at System.ServiceProcess. ServiceController. WaitForStatus(ServiceControllerStatus desiredStatus, TimeSpan timeout) at ReportServicesConfigUI.Panels.ServerInformationPanel.StartStopServiceTask(Boolean start)
Has anyone an idea what I should do ??
thankfully
Matti
Can anyone tell me the purpose to using service accounts in SQL Server rather than just having the services start as a system account.
Thanks
John Shurer
john.shurer@gte.net
I just had a question,
Is it possible to have a different account for the accoutn that starts the MSSQLServer service and the account tied to the Mail profile on the server?
We had created an account to start the SQLServer but we are in a network where we have a 1 way trust with another domain, we trust them but they dont trust us, and our exchange is on their domain.
WE currently use Windows authentication so our account used to start SQL Server would not be trusted by exchange.
Our thoughts on a solution were to have them create a service account that we would have access to the mailbox and would also start the SQL Server but thats it.
I was just wondering if anyone else had any other suggestions.
Thanks.
Hi Everyone. I have 150 SQL servers (2000 MSDE). They all run using various domain accounts as their service logins. Is there an automated way to find out those service logins? Maybe a query I could run on each server? I really do not want to go to each of those 150 servers and look at their properties manualy! :S Any help would be greatly appreciated! Thank you.
View 6 Replies View Related
Trying to install Backup Exec 12 which comes bundled with SQL Server 2005 Express.
OS is a clean install of Swedish Windows Server 2003 Std R2, fully patched.
SQL fails to install, and the following is in the SQL summary-log:
Product : Microsoft SQL Server 2005 Express Edition
Product Version : 9.2.3042.00
Install : Failed
Log File : C:ProgramMicrosoft SQL Server90Setup BootstrapLOGFilesSQLSetup0002_VAXSRV02_SQL.log
Last Action : Validate_ServiceAccounts
Error String : SQL Server Setup could not validate the service accounts. Either the service accounts have not been provided for all of the services being installed, or the specified username or password is incorrect. For each service, specify a valid username, password, and domain, or specify a built-in system account.
The logon account cannot be validated for the service SQL Server.
Error Number : 28075
Install log:
"C:Documents and SettingsadministratorSkrivbordBEWS_12.1364_32BIT_VERSIONWINNTINSTALLSQLExpressSQLEXPR.exe" /wait /qn /norestart /lv "C:ProgramMicrosoft SQL Server90Setup BootstrapLOGSummary.txt" INSTANCENAME=BKUPEXEC INSTALLSQLDIR="C:ProgramMicrosoft SQL Server" INSTALLSQLDATADIR="C:ProgramMicrosoft SQL Server" INSTALLSQLSHAREDIR="C:ProgramMicrosoft SQL Server" SQLACCOUNT="NT AUTHORITYSYSTEM" SQLPASSWORD="" ADDLOCAL=SQL_Engine,SQL_Data_Files,SQL_Replication,Client_Components,Connectivity SAPWD=**** DISABLENETWORKPROTOCOLS=0
03-19-2008,13:52:10 : V-225-53: ERROR: Failed to install SQL Express BKUPEXEC instance with error 28075.
Since the installation of SQL is bundled with the Backup Exec installation, there is no(?) possibility for me to specify usernames for the different services. The Backup Exec installation is initiated under the Domain Admin's login.
I suspect the problem occurs because of the OS not being English, but I am not sure. Have installed earlier versions of Backup Exec with SQL Server 2005 Express, on Swedish Windows Server 2003, before without issues.
No help at Veritas/Symantec's homepage.
Grateful for any help.
I have been reading through many postings here, through the MS SQL Server Unleashed book by SAMS, the MS SQL Tech article "Failover clustering for Microsoft SQL Server 2005 and SQL Server 2005 Analysis Services" for installing a brand new SQL 2005 2 node cluster.
So far I have not found the definitive answer that I am looking for and that is, what rights does the SQL service account need to work properly? One article states that it needs both Domain Admin permissions and local admin permissions (and this is a domain account by the way) and then another article states that it only needs domain users group permissions and the least amount of privledges possible.
Can anyone please tell me what is correct for installation and running the server? The more I read about this the more confused I get.
Please be patient as I am brand new to SQL.
Thank you very much!
i have a sql cluster setup, and need to change the user account that sqlserver starts with....any ideas? i screwed up and left it using localsystem account and now i can`t get sqlmail to work. i`m trying to avoid having to create the cluster again. any info appreciated.......jim jones
View 1 Replies View RelatedInstalled sql server 2012 enterprise. Runs with the built in account fine.
I tried entering a domain account to run as the service account from sql configuration it fails with the error "the specified network password is not correct".
I tried from services.msc and entered successfully but when I try to restart it fails that the log in credentials are wrong.
the domain account and password I entered are just fine. What's it I should do or missing?
This is the 1st time we are building a active/passive cluster with 1 node each. we usually install default instance and setup domain account as service account which will have an spn delegated. Now for active/passive cluster is it ok to use same domain account as service account for both clusters with both creating as default instance again as the windows was built as SERVER1 and SERVER2.
View 4 Replies View RelatedHi,
Re: SQL Server 2005
We have defined a local administrator to be the SQL Server and SQL Server Agent services user, and is also the job step owner for some SSIS packages I am running.
My question is, isn't by default a local administrator ALSO granted sysadmin in SQL Server? According to this link, it seems to imply this:
http://msdn2.microsoft.com/en-us/library/ms143504.aspx
However, I am having some permissions problems with the local adminstrator account (i.e. SQL Server agent account) when it runs the job. The error is that it doesn't have execute permissions on sp_dts_addlogentry.
How can this be, if it's granted sysadmin?
Thanks
In SQL 2005, is this an acceptable (prefered) way to give an application account EXEC permissions for sprocs and funcs in a specific database?
CREATE ROLE db_executor
GRANT EXECUTE TO db_executor
And then of course assign my user to this role on the database level.
I am trying to get away from adding exec to every sproc "manually" and then of course also having to add exec for any new sprocs that get added into the database.
This has been extremely confusing for me.
I want to just make a simple backup.
first of all when i choose the pick a folder to backup, no mapped drives I make are even THERE.
I realize this is probably related to the account being used, okay I thought let me change the user account to a network admin account... I still cannot see the drive.
Can't this thing just accept whatever I tell it to access like any other program??
You would think they would at least keep the standard Open File dialog so we can use the network browser or something...
I've changed my accounts all to NETWORK SERVICE, then LOCAL SYSTEM, then a DOMAIN ADMIN...
I can't get this to work correctly on this freshly installed server... can someone please help?
I'm at the point where I don't care if i have to just re-install the damn thing...
Just someone please tell me what to pick for the accounts.
Bonus: I have this same issue with reporting services and Services for Unix NFS Mapped drives.
How can I map a drive with NETWORK SERVICE Credentials so it finds the datasource path?
I've only been able to do something like this with psexec and Local System.
When logged in as Domain Admin it will show a disconnected network drive that you cant get rid of but system account can use.
Hi There
I am doing an unattended upgrade of Sql Express with Advanced Services SP1.
Before the upgrade the services run under domain accounts.
I use the following command :
start /wait setup UPGRADE=SQL_Engine INSTANCENAME=MSSQLSERVER SQLACCOUNT=DOMAINUser SQLPASSWORD=p@ssw0rd ADDLOCAL=Client_Components,SQL_SSMSEE /qn
However after the ugrade the service accounts are running under local system.
Documentation is unclear, i find the following:
; The services for SQL Server and Analysis Server are set auto start. To use the *ACCOUNT settings
; make sure to specify the DOMAIN, e.g. SQLACCOUNT=DOMAINNAMEACCOUNT
; NOTE: When installing SQL_Engine 3 accounts are REQUIRED: SQLACCOUNT, AGTACCOUNT and SQLBROWSERACCOUNT.
; SQLACCOUNT Examples:
; SQLACCOUNT=<domainuser>
; SQLACCOUNT="NT AUTHORITYSYSTEM"
; SQLACCOUNT="NT AUTHORITYNETWORK SERVICE"
; SQLACCOUNT="NT AUTHORITYLOCAL SERVICE"
To my knowledge the <> is not required.
Can someone please help as i cannot get the services accounts to run under a domain user after upgrade.
Thanx
My company doesn't allow using Local Service / Network Service accounts for SQL Server. So I created domain service accounts. Can multiple SQL Server installations use the same domain service accounts ?
View 4 Replies View RelatedHowdy Folks!
I'd like to put all the properties from the DBPROPSET_SSCE_DBINIT propset into a configuration file (XML probably) such that I can read in and dynamically adjust my SSCE connections. This way stuff like max database size and buffer size can be changed without a recompile.
My idea was to have an XML in the form:
<PropertySet Id = DBPROPSET_SSCE_DBINIT>
<Property Id = DBPROP_SSCE_AUTO_SHRINK_THRESHOLD>
<Options>DBPROPOPTIONS_REQUIRED</Options>
<Type>VT_I4</Type>
<Value>100</Value>
</Property>
<Property Id = DBPROP_SSCE_MAX_DATABASE_SIZE>
<Options>DBPROPOPTIONS_REQUIRED</Options>
<Type>VT_I4</Type>
<Value>1024</Value>
</Property>
.
.
.
</PropertySet>
Now my question is...can y'all think of any better way to convert these strings that I'll retrieve (e.g. "DBPROP_SSCE_MAX_DATABASE_SIZE") to their enum'd equivalents than to do the following:
if(PropertId == L"DBPROP_SSCE_AUTO_SHRINK_THRESHOLD") return DBPROP_SSCE_AUTO_SHRINK_THRESHOLD;
if(PropertId == L"DBPROP_SSCE_MAX_DATABASE_SIZE") return DBPROP_SSCE_MAX_DATABASE_SIZE;
It's seems entirely too unelegant and wasteful...but maybe I'm being too picky. It also has the disadvantage of needing to be updated if more properties are added with subsequent versions.
What do y'all think? Thanks as always!
set up asp .net user account on sql server 2005Question:
I've read the instructions in this article: http://www.netomatix.com/Development/aspnetuserpermissions.aspxBut do not know how to do this:You can grant 'Network Service' or 'ASPNET' user accounts permissions to connect to database.Please provide example on how to do this, thanks!
I cannot get a consistent answer as to how many domain accounts would be suggested in a SQL Server 2014 installation. Previously the recommendation was a separate account for each service to provide isolation and minimum permissions for each account. It seems from what I've read that a single domain account would have something added to make it unique from SQL Server's perspective. Several still advocate multiple accounts. I don't know if they are doing so because that's the way it's always been done or if there is still some compelling reason to do so. I don't want to create unnecessary accounts simply because something is "ideal."
View 8 Replies View RelatedI got a Im from a friend in finland saying checkout this link.
I did and it ask for msn hotmail add and password. it didnt show me any pictures of a party. then i get a message from a friend in Israel saying the link i sent didnt show any pictures...this link http://my address.yourpics.linkbux.org/
she was telling me that the link didnt work and she started to get e's from her list saying her link that she sent of pictures didnt work too.
what should be the next step, I and the person in israel already sent e-mails telling people dont open any im link saying a link
the person in finland has no idea yet
hi,
I'm reading some papers about reporting services; all is quite new for me so I wonder if the following is possible:
If I create a template for a report with two parameters (this must be possible according to my papers)... then, is it possible that my agents browse to an URL like: http://server/reportTemplate?param1='abc'¶m2='cde'
that they get an instant html report in their browser, based upon the actual data of that moment, and the parameters provided in the url.
is this possible?
thx
Dear friends
I read about 'NoSync' initialization.I tried out in my system.That time after executing Sp_Scriptpublicationcustomprocs,Stored procedures are propagated to subscriber.Replication was working fine.But afterwards I got some problem.So I reinstall my SQL Server I agin tried 'NoSync' initialization.This time Stored procedure is getting created on Publisher database not in subscriber.Can you tell me what may be the reason
I have two other doubts also
1)Sometimes I am getting error in subscriber.'The process couldn't connect to Distributor'.How to configure distributor in this case?
in configure publishing,distributor wizard I won't able to do anything like that change distributor login or something
2)How to delete Distributor database from a server.once it's get created if wan't also I won't able to delete it
3)If I am using SQL Server 2005 Peer to peer Replication whether it will be reliable for load balancing.My All servers will be in one office only.Or clustering may be better technology for load balancing.if it is like that can you tell me why it is?
Expecting reply
Filson
Hello,
I have just installed SQL Server 2005 Enterprise Evaluation Edition and everything work except the report server.
I have no problems to configure reporting services but when the configuration is done, the initialization doesn't work.
I have the message :
"There was an internal error
while switching panels. The most likely cause is an error retriewing
WMI properties. the exeception details are: An internal error occured on report server. For more informations, consult the log files (rsInternalError)"
when i search in thr log files, i have different messages (various errors without meaning for me) :
"Microsoft.ReportingServices.Diagnostics.Sku.EnsureCorrectEdition(SqlConnection sqlConn, String connectionString, Boolean checkRestrictedSkus)
at Microsoft.ReportingServices.Library.ConnectionManager.EnsureCorrectEdition()
at Microsoft.ReportingServices.Library.ConnectionManager.ConnectStorage()
at Microsoft.ReportingServices.Library.ServiceController.ServiceStartThread()"
ReportingServicesService!library!8!11/04/2006-13:59:33:: Exception caught while starting service. Error: System.Threading.ThreadAbortException: Le thread a été abandonné.
à Microsoft.SqlServer.SqlDumper.Dumper..ctor()
à Microsoft.SqlServer.SqlDumper.DumpClient.GetDumper()
à Microsoft.ReportingServices.Diagnostics.Dumper.DumpHere(Exception optionalException, String assertionMessage)
à Microsoft.ReportingServices.Diagnostics.Utilities.RSException..ctor(ErrorCode errorCode, String localizedMessage, Exception innerException, RSTrace tracer, String additionalTraceMessage)
à Microsoft.ReportingServices.Diagnostics.Utilities.ReportCatalogException..ctor(ErrorCode errorCode, String localizedMessage, Exception innerException, String additionalTraceMessage)
à Microsoft.ReportingServices.Diagnostics.Sku.EnsureCorrectEdition(SqlConnection sqlConn, String connectionString, Boolean checkRestrictedSkus)
à Microsoft.ReportingServices.Library.ConnectionManager.EnsureCorrectEdition()
à Microsoft.ReportingServices.Library.ConnectionManager.ConnectStorage()
à Microsoft.ReportingServices.Library.ServiceController.ServiceStartThread()
Hi,
We had a healthy 2-way merge replication set up with a SQL 2005 publisher/distributor and a SQL 2000 subscriber which had been running for about a week. I re-created the publication so I could add automatic identity range management to an article. I sucessfully re-created a push subscription to a SQL 2005 subscriber but when I tried to create one to the same SQL 2000 machine that had been quite happy a few hours earlier, I kept getting this error during initialization: "bulk data stream was incorrectly specified as sorted". Nothing much has changed as far as I can see. Can anyone give me some pointers?
Thanks,
Pete
I have seen these terms used but don't understand exactly what they are and how they differ. Could I use one without the other or are they a "linked" pair?
TIA,
Barkingdog
Hi
I am trying to configure reporting services. When I try to connect the portal through browser, it gives following error
"The report server installation is not initialized. (rsReportServerNotActivated) (rsRPCError)"..
Any idea, why this error? Also, in reporting services configuration manager, the initialization tab is greyed. I need this to get solved as soon as possible. Please let me know how can I get this thing done.
Regards
Abhinav
Guys I noticed that the value I set on one of the package variables is not carried over during the execution. I have a package variable of type String which I use to hold the string for a parameter in a stored procedure. My stored procedure has one output parameter which is the id of the record fetched using the string parameter. These are my parameters
1) User::vendorId Int32 Initial value = -1
2) User::vendorName String Initial value = Vendor A
I make the assignment in the Variable pane. Are there any other ways of doing this?
Watching the two variables reveals that only the value for the first variable is carried over during execution. The vendorname is always blank --> {}. I'm using a SQL Task with OLEDBConnection.
What's going on here?
Greetings all,I have a SQL Server 2005 Database for a product based solution which needs to be initialized with some basic info before it get's shipped along with the product. For example, the default admin password and assigning it to the Administrator role (Membership API). Additionally some other application specific info.My first thought would be to create a command line utility which would be executed just once that reads a text file definining what needs to go where and blow this into an empty database. I discovered the SSEUtil which could be handy but I understand this tool works only with SQL Express.Can someone suggest a strategy for handling this scenario?Thanks in advance!
View 1 Replies View RelatedI have a web config file with the connection string to my db in it. The same connection string is used throughout my application.
I authenticate users via my own Login page - this page uses the connection string in the web config file, connects to the db and proceeds to log the user on (a record of access is stored within the db). It then redirects to a second page. This page uses the same connection string from the web config file but on the "open" I get the following error:
Error Message: System.InvalidOperationException: The ConnectionString property has not been initialized. at System.Data.SqlClient.SqlConnection.Open()
The dim in the code is always the same:
Dim cnMyConn As New SqlConnection(ConfigurationSettings.AppSettings("connectionString"))
and the open is:
cnMyConn.Open()
This only happens on my hosted site. When I run locally on my test machine the page is displayed fine???? I have connection pooling set on in the remote web config file.
The web config remotely looks like:
<add key="connectionString" value="Server=???;uid=???t;pwd=???;database=unifuturenet; min Pool Size=3; max Pool Size=5;pooling=True;" />
??? set to appropriate values.
within the code, the connection is set by:
Dim cnMyConn As New SqlConnection(ConfigurationSettings.AppSettings("connectionString"))
If anyone has any bright ideas, I would appreciate it. It may be worth mentioning that I am running version 1.0.3705 and I have this in the remote web config file:
- <startup>
<supportedRuntime version="v1.0.3705" />
</startup>
Kind regards,
Rob
Hi all,
Complete newbie to ASP.NET, but you have to learn some time. Anyway, I am attempting to fill a datagrid from the Northwind database installed on my SQL server at work and I receive the following error when I attempt to compile to check the connection.
Format of the initialization string does not conform to specification starting at index 67.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: System.ArgumentException: Format of the initialization string does not conform to specification starting at index 67.Source Error:
Line 31:
Line 32: Private Sub Page_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
Line 33: Dim cnn As New SqlConnection( _
Line 34: "Data source=xxxxx;Initial Catalog=Northwind;User ID=sa;Password=;xxxxxx")
Line 35: End SubSource File: C:InetpubwwwrootApp_02default.aspx.vb Line: 33 Stack Trace:
[ArgumentException: Format of the initialization string does not conform to specification starting at index 67.]
System.Data.Common.DbConnectionOptions.GetKeyValuePair(String connectionString, Int32 currentPosition, StringBuilder buffer, String& keyname, String& keyvalue) +1203
System.Data.Common.DbConnectionOptions.ParseInternal(Hashtable parsetable, String connectionString, Boolean buildChain, Hashtable synonyms, Boolean firstKey) +127
System.Data.Common.DbConnectionOptions..ctor(String connectionString, Hashtable synonyms, Boolean useFirstKeyValuePair) +103
System.Data.SqlClient.SqlConnectionString..ctor(String connectionString) +32
System.Data.SqlClient.SqlConnectionFactory.CreateConnectionOptions(String connectionString, DbConnectionOptions previous) +25
System.Data.ProviderBase.DbConnectionFactory.GetConnectionPoolGroup(String connectionString, DbConnectionPoolOptions poolOptions, DbConnectionOptions& userConnectionOptions) +119
System.Data.ProviderBase.DbConnectionBase.set_ConnectionString(String value) +53
System.Data.SqlClient.SqlConnection.set_ConnectionString(String value) +7
System.Data.SqlClient.SqlConnection..ctor(String connectionString) +23
App_02.WebForm1.Page_Load(Object sender, EventArgs e) in C:InetpubwwwrootApp_02default.aspx.vb:33
System.Web.UI.Control.OnLoad(EventArgs e) +102
System.Web.UI.Control.LoadRecursive() +45
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +952
I have been tearing my hair out trying to work out this error. Can anyone help????
Using VisualStudio.NET 2003 on an XP box and and SQL Server 2000 on a Windows2003 Server box.
Thanks,
Gerald