Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase 12»»

SQL Server service account locked Expand / Collapse
Author
Message
Posted Tuesday, April 16, 2013 3:00 AM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Friday, May 30, 2014 8:15 AM
Points: 1,056, Visits: 2,687
Hello,

We had a case where in the domain account which is running SQL server got locked.

Database connectivity through management studio and applciations worked fine.

Report services showed the reports how ever the connectivity failed saying account locked.

Did any one faced these kind of issue before.


I need to identify this issue and alert, if it possible.

second i need to find how many jobs not started on that particular day, if there is an issue as an alert.

Are the above possible if i need to check some thing more please share your suggestions.

our server team havent identified the root cause yet. any suggestion where i can start with.


Regards
Durai Nagarajan
Post #1442651
Posted Tuesday, April 16, 2013 3:45 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Tuesday, September 17, 2013 6:32 AM
Points: 12, Visits: 126
Hello Frnd......

you can unlocked user:

Login with administrator--> open a local user and group manager .

In the right pane under the Name column, double click on the locked out user account.

Uncheck the Account is locked out box, and click on OK.

you can check in event log why this account was locked.

Rajesh Singh
DBA(HCL Comnet)
+919560888360


Rajesh Singh
DBA(HCL Comnet)
+91-0560888360
Post #1442663
Posted Tuesday, April 16, 2013 4:19 AM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Friday, May 30, 2014 8:15 AM
Points: 1,056, Visits: 2,687
Hello,

Forgot to mention we (our team) dont have access to do that.

is there a way to indentify the state and alert.



Regards
Durai Nagarajan
Post #1442670
Posted Tuesday, April 16, 2013 11:56 PM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Friday, May 30, 2014 8:15 AM
Points: 1,056, Visits: 2,687
any suggestions?


Regards
Durai Nagarajan
Post #1443098
Posted Wednesday, April 17, 2013 12:10 AM


SSC-Forever

SSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-Forever

Group: General Forum Members
Last Login: Today @ 7:21 AM
Points: 42,767, Visits: 35,866
Speak to your AD team, ask them to set the account to not allow interactive logins (users should not be using the service account) and ask them if they can put any alerts or notifications to let them or you know if the account does become locked. If it does, you should investigate who or what is entering a bad password and resolve the source of the problem.


Gail Shaw
Microsoft Certified Master: SQL Server 2008, MVP
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Post #1443102
Posted Wednesday, April 17, 2013 12:35 AM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Friday, May 30, 2014 8:15 AM
Points: 1,056, Visits: 2,687
thanks gail

hope i understand that we cant do through sql.


Regards
Durai Nagarajan
Post #1443111
Posted Wednesday, April 17, 2013 12:38 AM


SSC-Forever

SSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-Forever

Group: General Forum Members
Last Login: Today @ 7:21 AM
Points: 42,767, Visits: 35,866
No, you can't access the Active Directory list of logins and users via T-SQL.


Gail Shaw
Microsoft Certified Master: SQL Server 2008, MVP
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass

Post #1443113
Posted Wednesday, April 17, 2013 12:59 AM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Friday, May 30, 2014 8:15 AM
Points: 1,056, Visits: 2,687
thanks again gail.



Regards
Durai Nagarajan
Post #1443118
Posted Wednesday, April 17, 2013 1:16 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Wednesday, March 19, 2014 7:44 AM
Points: 10, Visits: 53
On a SQL Server, you can hunt down your event logs (may be security logs) and search for SQL Server service account and find some information related to it as when and who locked it. It does have a MAJOR IMPACT if SQL Servers that run under this locked account have rebooted. Server (OS) will start but SQL WILL NOT START.

So check your event logs and check with your AD Team as well as Gail suggested. Also, her suggestion regarding diabling interactive login of service account is very valid. It is very important.

Thanks,
Vikas
Post #1443129
Posted Thursday, April 18, 2013 4:55 AM
Old Hand

Old HandOld HandOld HandOld HandOld HandOld HandOld HandOld Hand

Group: General Forum Members
Last Login: Tuesday, August 12, 2014 12:58 AM
Points: 383, Visits: 1,481
LDAP queries?

Post #1443736
« Prev Topic | Next Topic »

Add to briefcase 12»»

Permissions Expand / Collapse