Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase 12»»

Problem with agent service accounts? Expand / Collapse
Author
Message
Posted Tuesday, August 06, 2013 2:33 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Thursday, March 06, 2014 10:30 AM
Points: 8, Visits: 59
Hey guys. Ive never had this problem with SQL2008 /R2. But I cant get the SQL Agent to log in with anything but local system or a local user that has admin rights on the server. Generally, I would make a SQL_svc_agent_user and grant no rights and and using the sql installer it would grant any permissions including log on a service and add NT SERVICE\SQLSERVERAGENT as SA.


Now even with all that in place this user cannot log on in 2012. Even if I granted SQL_svc_agent_user SA rights in Management Studio this still does not work. Seems like something changed in 2012? What am i missing here? The service account for SQL runs just fine but not the agent. This is a local account, but the machine is connected to a domain. Its driving me nuts!
Post #1481558
Posted Wednesday, August 07, 2013 12:50 AM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Wednesday, March 19, 2014 5:48 AM
Points: 1,048, Visits: 2,646
if you look at services in which account SQL Agent is running under?

Regards
Durai Nagarajan
Post #1481683
Posted Wednesday, August 07, 2013 3:13 AM
Say Hey Kid

Say Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey Kid

Group: General Forum Members
Last Login: Today @ 9:24 AM
Points: 702, Visits: 1,383
What happens when you try setting the SQL Agent to a domain account in SQL Server Configuration Manager? Does it succeed or does it give you an error? If it produces an error can you post it?

Joie Andrew
"Since 1982"
Post #1481751
Posted Wednesday, August 07, 2013 8:33 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Thursday, March 06, 2014 10:30 AM
Points: 8, Visits: 59
durai nagarajan (8/7/2013)
if you look at services in which account SQL Agent is running under?


Currently its running under LocalSystem. But I have made a local account for it and entered during setup. The service account stuck but the agent account crapped out. Process monitor did give me some access denied entries when I try to start it but I was under the impression the sql configuration manager would take care of it. Unless this is something new in SQL Server 2012 does the agent account need to belong to the admin group?

Regarding the domain account. I don't have one this is a client system we are assisting with. I may end up leaving it as LocalSystem if its too much of a hassle. For what its worth this is also on Server 2012 and I already disabled user account control. The installation was performed with an admin added to the administrator group. Not the main local Admin.
Post #1481909
Posted Wednesday, August 07, 2013 8:43 AM
Say Hey Kid

Say Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey Kid

Group: General Forum Members
Last Login: Today @ 9:24 AM
Points: 702, Visits: 1,383
When you try and start the SQL Agent service under a local account and it fails do you get any logon failures in the security log in Event Viewer? If so can you post them? Also, can you verify that the local account that you want to start the service as has the "Log on as a Service" right? This should have been set when you configure the account in SQL Server Configuration Manager, but it is possible that this did not happen.

Joie Andrew
"Since 1982"
Post #1481912
Posted Wednesday, August 07, 2013 9:01 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Thursday, March 06, 2014 10:30 AM
Points: 8, Visits: 59
Joie Andrew (8/7/2013)
When you try and start the SQL Agent service under a local account and it fails do you get any logon failures in the security log in Event Viewer? If so can you post them? Also, can you verify that the local account that you want to start the service as has the "Log on as a Service" right? This should have been set when you configure the account in SQL Server Configuration Manager, but it is possible that this did not happen.


It used to say access denied. It now says: The SQL Server Agent (MSSQLSERVER) service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion. Think that is result of adding full access to user NT SERVICE\SQLSERVERAGENT in path data\MSSQL11.MSSQLSERVER\MSSQL\Binn

Just confirmed User Rights Assignment > Log on as Service . The user SQL_agent_svc_usr does exist on the list.
Post #1481922
Posted Wednesday, August 07, 2013 9:32 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Thursday, March 06, 2014 10:30 AM
Points: 8, Visits: 59
Process Monitor also shows a few ACCESS DENIED entries as I attempt to start the service. Here is one directly related to the agent:

Process Name: SQLAGENT.EXE

Operation: CreateFile

Path: D:\SQLData\data\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlsvc.dll

Result: ACCESS DENIED

Desired Access: Read Data/List Directory, http://www.sqlservercentral.com/Forums/Skins/Classic/Images/RichTextBoxTable/tbl_bottomleft.gifExecute/Traverse, Synchronize
Disposition: Open
Options: Synchronous IO Non-Alert, Non-Directory File
Attributes: n/a
ShareMode: Read, Delete
AllocationSize: n/a
Post #1481940
Posted Wednesday, August 07, 2013 11:52 PM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Wednesday, March 19, 2014 5:48 AM
Points: 1,048, Visits: 2,646
does NT AUTHORITY\NETWORK SERVICE has access to msdb with all sqlagent permissions.

Regards
Durai Nagarajan
Post #1482142
Posted Thursday, August 08, 2013 8:46 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Thursday, March 06, 2014 10:30 AM
Points: 8, Visits: 59
durai nagarajan (8/7/2013)
does NT AUTHORITY\NETWORK SERVICE has access to msdb with all sqlagent permissions.


I have granted NT AUTHORITY\NETWORK SERVICE the sysadmin server role. This should give it rights to everything.

However, it still will not start and gives the same ACCESS DENIED in process monitor to the path D:\SQLData\data\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlsvc.dll
Post #1482375
Posted Thursday, August 08, 2013 10:03 AM
SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: Friday, April 18, 2014 2:34 PM
Points: 167, Visits: 380
Two questions:

1) Does the SQL Server error log show a login failure for that login when you try to start the Agent?

2) The "Access Denied" error you received looks more like a file system permissions issue. Have you checked file systems permissions?

Cheers!
Post #1482440
« Prev Topic | Next Topic »

Add to briefcase 12»»

Permissions Expand / Collapse