SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


SQL Server service account locked


SQL Server service account locked

Author
Message
durai nagarajan
durai nagarajan
SSCertifiable
SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)

Group: General Forum Members
Points: 5813 Visits: 2853
Hello,

We had a case where in the domain account which is running SQL server got locked.

Database connectivity through management studio and applciations worked fine.

Report services showed the reports how ever the connectivity failed saying account locked.

Did any one faced these kind of issue before.


I need to identify this issue and alert, if it possible.

second i need to find how many jobs not started on that particular day, if there is an issue as an alert.

Are the above possible if i need to check some thing more please share your suggestions.

our server team havent identified the root cause yet. any suggestion where i can start with.

Regards
Durai Nagarajan
rajeshsdba
rajeshsdba
Valued Member
Valued Member (72 reputation)Valued Member (72 reputation)Valued Member (72 reputation)Valued Member (72 reputation)Valued Member (72 reputation)Valued Member (72 reputation)Valued Member (72 reputation)Valued Member (72 reputation)

Group: General Forum Members
Points: 72 Visits: 127
Hello Frnd......

you can unlocked user:

Login with administrator--> open a local user and group manager .

In the right pane under the Name column, double click on the locked out user account.

Uncheck the Account is locked out box, and click on OK.

you can check in event log why this account was locked.

Rajesh Singh
DBA(HCL Comnet)
+919560888360

Rajesh Singh
DBA(HCL Comnet)
+91-0560888360
durai nagarajan
durai nagarajan
SSCertifiable
SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)

Group: General Forum Members
Points: 5813 Visits: 2853
Hello,

Forgot to mention we (our team) dont have access to do that.

is there a way to indentify the state and alert.

Regards
Durai Nagarajan
durai nagarajan
durai nagarajan
SSCertifiable
SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)

Group: General Forum Members
Points: 5813 Visits: 2853
any suggestions?

Regards
Durai Nagarajan
GilaMonster
GilaMonster
SSC Guru
SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)

Group: General Forum Members
Points: 370119 Visits: 46950
Speak to your AD team, ask them to set the account to not allow interactive logins (users should not be using the service account) and ask them if they can put any alerts or notifications to let them or you know if the account does become locked. If it does, you should investigate who or what is entering a bad password and resolve the source of the problem.

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass


durai nagarajan
durai nagarajan
SSCertifiable
SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)

Group: General Forum Members
Points: 5813 Visits: 2853
thanks gail

hope i understand that we cant do through sql.

Regards
Durai Nagarajan
GilaMonster
GilaMonster
SSC Guru
SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)SSC Guru (370K reputation)

Group: General Forum Members
Points: 370119 Visits: 46950
No, you can't access the Active Directory list of logins and users via T-SQL.

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass


durai nagarajan
durai nagarajan
SSCertifiable
SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)SSCertifiable (5.8K reputation)

Group: General Forum Members
Points: 5813 Visits: 2853
thanks again gail.

Regards
Durai Nagarajan
VickyDBA
VickyDBA
SSC Journeyman
SSC Journeyman (78 reputation)SSC Journeyman (78 reputation)SSC Journeyman (78 reputation)SSC Journeyman (78 reputation)SSC Journeyman (78 reputation)SSC Journeyman (78 reputation)SSC Journeyman (78 reputation)SSC Journeyman (78 reputation)

Group: General Forum Members
Points: 78 Visits: 78
On a SQL Server, you can hunt down your event logs (may be security logs) and search for SQL Server service account and find some information related to it as when and who locked it. It does have a MAJOR IMPACT if SQL Servers that run under this locked account have rebooted. Server (OS) will start but SQL WILL NOT START.

So check your event logs and check with your AD Team as well as Gail suggested. Also, her suggestion regarding diabling interactive login of service account is very valid. It is very important.

Thanks,
Vikas
jasonmorris
jasonmorris
SSC Eights!
SSC Eights! (982 reputation)SSC Eights! (982 reputation)SSC Eights! (982 reputation)SSC Eights! (982 reputation)SSC Eights! (982 reputation)SSC Eights! (982 reputation)SSC Eights! (982 reputation)SSC Eights! (982 reputation)

Group: General Forum Members
Points: 982 Visits: 1529
LDAP queries?
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search