Home Forums SQL Server 2008 SQL Server 2008 - General CMDExec Proxy account not working with Domain Service Account... RE: CMDExec Proxy account not working with Domain Service Account...

  • October 18, 2013 at 2:37 am

    #1659591

    jasona.work (4/17/2013)

    I may have found the solution to this...

    It seems the SQL Agent Service Account may need the "Replace a Process Level Token" right. Seeing as the domain is locked down, I've requested they "clone" the GPOs that are applying to the existing (working) system to the new system. Failing that, I'll ask them to configure a GPO to do this.

    Further updates (and hoepfully the solution) as the situation warrants.

    😉

    Jason

    Thanks a lot for sharing!!! It lead me to the problem - we have a default server GPO that restricts that user rights assignment to LOCAL SERVICE and NETWORK SERVICE - once overrode that everything worked as expected. Thanks again!