InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comSat, 25 May 2013 04:39:04 GMT20http://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxThank you guys....Wed, 18 Jan 2012 02:31:52 GMTarun7787http://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspx(angels heralding Alleluia)Well it is good the mystery is solved because we were out of ideas..CEWIIMon, 16 Jan 2012 08:14:40 GMTElliott Whitlowhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxFinallyyyy . it's working !!Apparently due to some strange extra permission issues, even though that proxy user had "FULL" control to the bottom of folder chain it was denying access to child folders.After refusing many times, finally client security team agreed that issue was with their permissions not with SSIS package itself ...Never mind, thanks everyone for their time to reply my question.JackMon, 16 Jan 2012 07:34:10 GMTjck.lockehttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxHas the on-site dba been able to successfully run the package from BIDS?Wed, 11 Jan 2012 10:03:35 GMTSQLRNNRhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspx[quote][b]Elliott Whitlow (1/10/2012)[/b][hr]That is really quite odd.. If the permissions at the folder and share levels are good all I can think of is file permissions and thats a stretch. but a file doesn't automagically take the permissions of the folder its in in all cases. If that isn't it I'm at a loss to explain..CEWII[/quote]I know, this error doesn't make any sense (and that is the reason why I posted it here for help :-D).Wed, 11 Jan 2012 08:47:38 GMTjck.lockehttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxThat is really quite odd.. If the permissions at the folder and share levels are good all I can think of is file permissions and thats a stretch. but a file doesn't automagically take the permissions of the folder its in in all cases. If that isn't it I'm at a loss to explain..CEWIITue, 10 Jan 2012 12:35:58 GMTElliott Whitlowhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspx[quote][b]jck.locke (1/10/2012)[/b][hr][quote][b]Nimesh_Parikh (1/10/2012)[/b][hr]can you please check your Package Owner and Execution Owner both are same? Both of them should have permission on your all folders.[/quote]I have not deployed my package in SQL Server, I am using file system. In this case, will there be Package Owner or Execution Owner ?? If so then where I can find/change it [/quote]I think he is confused with DTS.. CEWIITue, 10 Jan 2012 08:37:59 GMTElliott Whitlowhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspx[quote][b]Nimesh_Parikh (1/10/2012)[/b][hr]can you please check your Package Owner and Execution Owner both are same? Both of them should have permission on your all folders.[/quote]I have not deployed my package in SQL Server, I am using file system. In this case, will there be Package Owner or Execution Owner ?? If so then where I can find/change it Tue, 10 Jan 2012 07:12:21 GMTjck.lockehttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxHey,can you please check your Package Owner and Execution Owner both are same? Both of them should have permissionon your all folders.Thanks,NimeshTue, 10 Jan 2012 04:45:59 GMTNimesh_Parikhhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspx[quote][b]SQLRNNR (1/9/2012)[/b] Permissions don't always cascade to child folders. Check the subfolders and confirm permissions exist there.[/quote][quote][b]Elliott Whitlow (1/9/2012)[/b] You need to review the underlying permissions, as Jason said, they don't ALWAYS cascade. If the proxy user has full access to the share then the folders are the next layer to review..[/quote]I checked upto bottom of chain and that proxy account has FULL permission to all of those folders.[quote][b]SQLRNNR (1/9/2012)[/b] Also, check to see if a firewall or router exists between the servers and shares. There may be routing rules at play or a firewall rule preventing access.[/quote]I think a firewall exists between Server and share because both of them are different server. But I also have other utilities and a web apps which are residing on same server as share and can communicate with database server which I am using to run SQL Agent task. And as far as I know, there are no routing rules in place.What is puzzling me is, say if something is totally screwed up and package can't access network resources, then why my task doesn't fail with error ?? In my case, my task gets successfully completed. I will find error only when I see task execution history.Thanks,JackMon, 09 Jan 2012 13:31:43 GMTjck.lockehttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspx[quote][b]jck.locke (1/9/2012)[/b][hr]@Elliott, yes when job is being executed with Proxy account SQL Agent will use that proxy account to execute that job (that's the reason we use proxy account at first place, right ??). And yes I checked that proxy user for access to network share drives. Actually that proxy user is assigned FULL ACCESS to that share. However, Do I need to give permission to all subfolders as well ?? I thought that if I set permission to root folder all sub folders will too follow that permission, don't they ??[/quote]You need to review the underlying permissions, as Jason said, they don't ALWAYS cascade. If the proxy user has full access to the share then the folders are the next layer to review..CEWIIMon, 09 Jan 2012 12:44:15 GMTElliott Whitlowhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxPermissions don't always cascade to child folders. Check the subfolders and confirm permissions exist there.Even though it works in your stage environment, it is not a guarantee that it will work at the client site. Something is definitely configured different between the two.Also, check to see if a firewall or router exists between the servers and shares. There may be routing rules at play or a firewall rule preventing access.Mon, 09 Jan 2012 11:50:33 GMTSQLRNNRhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxThank you guys for super quick responses, I guess I am not the only one free at work :-P ... just kidding.@Jason, I don't have access to DB server but I can ask client DBA to try it for me. Thing is, this package works just fine in our staging environment (with configuration file) but it unfortunately staging doesn't reflect actual corporate network environment with all sort of crazy permissions.@Elliott, yes when job is being executed with Proxy account SQL Agent will use that proxy account to execute that job (that's the reason we use proxy account at first place, right ??). And yes I checked that proxy user for access to network share drives. Actually that proxy user is assigned FULL ACCESS to that share. However, Do I need to give permission to all subfolders as well ?? I thought that if I set permission to root folder all sub folders will too follow that permission, don't they ??Any other suggestion ??Thanks,JackMon, 09 Jan 2012 11:46:33 GMTjck.lockehttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxSSIS runs in the context it is started in. ie: the proxy account. You said the usre has full access on the folders, but did you check the share? Are they on the same share? Remember there are share permissions and folder permissions, and file permissions. And any one of those could be a problem.CEWIIMon, 09 Jan 2012 09:56:26 GMTElliott Whitlowhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxI could be wrong, but I *think* that SSIS has its own login which needs the access, since it is the one handling the moving of the files.Mon, 09 Jan 2012 09:46:42 GMTkramaswamyhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspxCan you get the package to run outside of the agent job?Mon, 09 Jan 2012 09:45:34 GMTSQLRNNRhttp://www.sqlservercentral.com/Forums/Topic1232565-148-1.aspx[SOLVED]Hi All,I am facing really strange issue. I am working with a customer for who, we have created a SSIS package as part of some data exchange process.What this SSIS package does is, it runs using SQL Agent Scheduler at some interval and it looks into some specific folder and parses any file in that folder. Once parsing is done, that file is moved to Archive folder or if file can't be parsed then will be moved to corrupted files folder.Now, this SSIS package is stored in FILE SYSTEM. And it is using configuration file and we have modified paths of these folders to network folders. On our client site, both these SSIS package and config file are located at SAN. DBA working for this client side has created a SQL Agent task to run this SSIS package which uses this configuration file.Question is, when I run this task to test, it get completed successfully (I mean job doesn't get fail). But if I look at task execution history, I see messages like,[code="other"]Code: 0xC002F304 Source: Move File to Archive File System Task Description: An error occurred with the following error message: "Access to the path is denied.". End Error Error: 2012-01-09 09:51:34.48[/code]This SQL Agent is using a proxy account, and DBA confirmed that this proxy account has FULL CONTROL to all of these folders.If this is helpful to know then, SQL Server instance which runs this SSIS package, all 3 folders, and SSIS package(with config file) are located on 3 different servers. SQL Server DB runs in a compatibility level of 90 (SQL Server 2005).Any help or suggestion is appreciated.Thanks,JackMon, 09 Jan 2012 09:27:22 GMTjck.locke