Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase «««3,9483,9493,9503,9513,952»»»

Are the posted questions getting worse? Expand / Collapse
Author
Message
Posted Monday, April 22, 2013 2:42 PM


SSCrazy

SSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazySSCrazy

Group: General Forum Members
Last Login: Thursday, November 6, 2014 5:01 AM
Points: 2,116, Visits: 6,441
...Don't mind the goldfish...


Now we eventually know what that avatar of yours represents


--------------------------------------------------------------------------
A little knowledge is a dangerous thing (Alexander Pope)

In order for us to help you as efficiently as possible, please read this before posting (courtesy of Jeff Moden)
Post #1445185
Posted Monday, April 22, 2013 3:46 PM


SSCertifiable

SSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiable

Group: General Forum Members
Last Login: Monday, December 15, 2014 2:26 PM
Points: 5,466, Visits: 7,647
Jan Van der Eecken (4/22/2013)
...Don't mind the goldfish...


Now we eventually know what that avatar of yours represents


LOL, actually it was the closest I could get to a dust bunny (who lives on beer popsicles) for a while. Though, I've been feeling I needed a change of avatar. Excellent choice!



- Craig Farrell

Never stop learning, even if it hurts. Ego bruises are practically mandatory as you learn unless you've never risked enough to make a mistake.

For better assistance in answering your questions | Forum Netiquette
For index/tuning help, follow these directions. |Tally Tables

Twitter: @AnyWayDBA
Post #1445217
Posted Monday, April 22, 2013 5:26 PM


SSC-Dedicated

SSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-Dedicated

Group: General Forum Members
Last Login: Today @ 8:47 PM
Points: 35,770, Visits: 32,436
Evil Kraig F (4/22/2013)
Jan Van der Eecken (4/22/2013)
...Don't mind the goldfish...


Now we eventually know what that avatar of yours represents


LOL, actually it was the closest I could get to a dust bunny (who lives on beer popsicles) for a while. Though, I've been feeling I needed a change of avatar. Excellent choice!


Too funny...


--Jeff Moden
"RBAR is pronounced "ree-bar" and is a "Modenism" for "Row-By-Agonizing-Row".

First step towards the paradigm shift of writing Set Based code:
Stop thinking about what you want to do to a row... think, instead, of what you want to do to a column."

(play on words) "Just because you CAN do something in T-SQL, doesn't mean you SHOULDN'T." --22 Aug 2013

Helpful Links:
How to post code problems
How to post performance problems
Post #1445230
Posted Tuesday, April 23, 2013 5:58 AM


Right there with Babe

Right there with BabeRight there with BabeRight there with BabeRight there with BabeRight there with BabeRight there with BabeRight there with BabeRight there with Babe

Group: General Forum Members
Last Login: Today @ 5:34 PM
Points: 748, Visits: 5,519
Frickin fracking g***amn locked down idiot nitwit domains!!!

Fracking place implemented / started enforcing a policy that prevents ANY accounts from having the "replace a process level token" privilege, thereby BREAKING ALL the Agent jobs that run DTS / SSIS packages on 3 different servers!

I can't re-add any accounts to the privilege because it's handled by the GPO, can't (quickly) get the policy modified, can't have the servers put in the "exception" group where I COULD add accounts...

I'm sorely tempted to find out who's behind creating these GPOs, and forwarding the PO'ed e-mails and calls to them...

GRRR.

OK, thanks, just needed to vent on this...
Jason

(Now where's my prozac / valium / alcohol?)
Post #1445376
Posted Tuesday, April 23, 2013 6:23 AM


Say Hey Kid

Say Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey Kid

Group: General Forum Members
Last Login: Today @ 10:05 AM
Points: 677, Visits: 6,849
jasona.work (4/23/2013)
Frickin fracking g***amn locked down idiot nitwit domains!!!

Fracking place implemented / started enforcing a policy that prevents ANY accounts from having the "replace a process level token" privilege, thereby BREAKING ALL the Agent jobs that run DTS / SSIS packages on 3 different servers!

I can't re-add any accounts to the privilege because it's handled by the GPO, can't (quickly) get the policy modified, can't have the servers put in the "exception" group where I COULD add accounts...

I'm sorely tempted to find out who's behind creating these GPOs, and forwarding the PO'ed e-mails and calls to them...

GRRR.

OK, thanks, just needed to vent on this...
Jason

(Now where's my prozac / valium / alcohol?)


Sounds like the Gods running AD need to test and see how Service Accounts and Delegation need to be folded in.
Or maybe a Proxy Account using Server Credentials could work.
Although that would be a nighmare to setup and maintain over time.
Suggest all SQL Servers run under Doamin Admin Credentials to minimize service distuptions.

On a serious note, you should keep tabs on what the impact is.
You are not world class, but Worlds *SS when you do this with GPO's and no testing.
Post #1445383
Posted Tuesday, April 23, 2013 8:40 AM
SSC Veteran

SSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC VeteranSSC Veteran

Group: General Forum Members
Last Login: Tuesday, December 9, 2014 7:37 AM
Points: 269, Visits: 1,712
Brandie Tarvin (4/22/2013)
Hey guys, I need your help please. On Wednesday we're having a "bring the kids to work day" and I'm helping out. I've been asked to "train" the kids on my job. It's a small group of 8-12 year olds and I need 30-45 minutes worth of fun activities that give them an idea of what I do.

Anyone have any thoughts?


A lot of games need a data layer. Maybe you could work with them to design a back-end for a 20 Questions-like game. The database would need to store data on famous people and using the answers to Yes/No questions whittle down the candidates. May not be do-able in that time frame, but it's a thought.
Post #1445486
Posted Tuesday, April 23, 2013 9:27 AM


SSCoach

SSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoach

Group: General Forum Members
Last Login: Today @ 10:00 PM
Points: 18,060, Visits: 16,093
jasona.work (4/23/2013)
Frickin fracking g***amn locked down idiot nitwit domains!!!

Fracking place implemented / started enforcing a policy that prevents ANY accounts from having the "replace a process level token" privilege, thereby BREAKING ALL the Agent jobs that run DTS / SSIS packages on 3 different servers!

I can't re-add any accounts to the privilege because it's handled by the GPO, can't (quickly) get the policy modified, can't have the servers put in the "exception" group where I COULD add accounts...

I'm sorely tempted to find out who's behind creating these GPOs, and forwarding the PO'ed e-mails and calls to them...

GRRR.

OK, thanks, just needed to vent on this...
Jason

(Now where's my prozac / valium / alcohol?)


Thanks for the laugh.

Sysadmins have a bigger communication issue than dba's - and people say dba's don't communicate well.





Jason AKA CirqueDeSQLeil
I have given a name to my pain...
MCM SQL Server, MVP


SQL RNNR

Posting Performance Based Questions - Gail Shaw
Post #1445523
Posted Tuesday, April 23, 2013 12:49 PM


Right there with Babe

Right there with BabeRight there with BabeRight there with BabeRight there with BabeRight there with BabeRight there with BabeRight there with BabeRight there with Babe

Group: General Forum Members
Last Login: Today @ 5:34 PM
Points: 748, Visits: 5,519
Thankfully, one of the sysadmins was able to work with me to work around the problem for now (granted the service account the needed privs)

I found an MSDN article which I forwarded on to one of the people involved in requesting "exceptions" to policies that indicates that if the Agent service account doesn't have these privileges, proxies won't work.

Only took almost all day to get this worked out...

Jason
Post #1445641
Posted Tuesday, April 23, 2013 12:58 PM


SSCoach

SSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoachSSCoach

Group: General Forum Members
Last Login: Today @ 10:00 PM
Points: 18,060, Visits: 16,093
jasona.work (4/23/2013)
Thankfully, one of the sysadmins was able to work with me to work around the problem for now (granted the service account the needed privs)

I found an MSDN article which I forwarded on to one of the people involved in requesting "exceptions" to policies that indicates that if the Agent service account doesn't have these privileges, proxies won't work.

Only took almost all day to get this worked out...

Jason


That's good it worked out.

Unfortunate it took sooo long.




Jason AKA CirqueDeSQLeil
I have given a name to my pain...
MCM SQL Server, MVP


SQL RNNR

Posting Performance Based Questions - Gail Shaw
Post #1445649
Posted Tuesday, April 23, 2013 5:30 PM


SSC-Dedicated

SSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-Dedicated

Group: General Forum Members
Last Login: Today @ 8:47 PM
Points: 35,770, Visits: 32,436
jasona.work (4/23/2013)
Frickin fracking g***amn locked down idiot nitwit domains!!!

Fracking place implemented / started enforcing a policy that prevents ANY accounts from having the "replace a process level token" privilege, thereby BREAKING ALL the Agent jobs that run DTS / SSIS packages on 3 different servers!

I can't re-add any accounts to the privilege because it's handled by the GPO, can't (quickly) get the policy modified, can't have the servers put in the "exception" group where I COULD add accounts...

I'm sorely tempted to find out who's behind creating these GPOs, and forwarding the PO'ed e-mails and calls to them...

GRRR.

OK, thanks, just needed to vent on this...
Jason

(Now where's my prozac / valium / alcohol?)


Oddly enough, that's pretty much the way I'd handle it. Not the prozac with a beer popsicle kicker. That comes later. I mean once I determined what the problem was, I'd send a couple of emails out to the "gods" to advise them that the systems were down because of an unannounced change to an unreasonable policy and they need to roll the change back until they figure out how to do it without bringing every reasonable system to it's knees.

Then I'd go to the bar. Hopefully I wouldn't run into the folks making these changes on the way because I wouldn't want to get to the bar via a term in jail.


--Jeff Moden
"RBAR is pronounced "ree-bar" and is a "Modenism" for "Row-By-Agonizing-Row".

First step towards the paradigm shift of writing Set Based code:
Stop thinking about what you want to do to a row... think, instead, of what you want to do to a column."

(play on words) "Just because you CAN do something in T-SQL, doesn't mean you SHOULDN'T." --22 Aug 2013

Helpful Links:
How to post code problems
How to post performance problems
Post #1445727
« Prev Topic | Next Topic »

Add to briefcase «««3,9483,9493,9503,9513,952»»»

Permissions Expand / Collapse