SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Problem with agent service accounts?


Problem with agent service accounts?

Author
Message
thepiecesfit
thepiecesfit
SSC Rookie
SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)

Group: General Forum Members
Points: 40 Visits: 76
Hey guys. Ive never had this problem with SQL2008 /R2. But I cant get the SQL Agent to log in with anything but local system or a local user that has admin rights on the server. Generally, I would make a SQL_svc_agent_user and grant no rights and and using the sql installer it would grant any permissions including log on a service and add NT SERVICE\SQLSERVERAGENT as SA.


Now even with all that in place this user cannot log on in 2012. Even if I granted SQL_svc_agent_user SA rights in Management Studio this still does not work. Seems like something changed in 2012? What am i missing here? The service account for SQL runs just fine but not the agent. This is a local account, but the machine is connected to a domain. Its driving me nuts!Hehe
durai nagarajan
durai nagarajan
SSCommitted
SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)

Group: General Forum Members
Points: 1611 Visits: 2775
if you look at services in which account SQL Agent is running under?

Regards
Durai Nagarajan
Joie Andrew
Joie Andrew
SSCrazy
SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)

Group: General Forum Members
Points: 2333 Visits: 2032
What happens when you try setting the SQL Agent to a domain account in SQL Server Configuration Manager? Does it succeed or does it give you an error? If it produces an error can you post it?

Joie Andrew
"Since 1982"
thepiecesfit
thepiecesfit
SSC Rookie
SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)

Group: General Forum Members
Points: 40 Visits: 76
durai nagarajan (8/7/2013)
if you look at services in which account SQL Agent is running under?


Currently its running under LocalSystem. But I have made a local account for it and entered during setup. The service account stuck but the agent account crapped out. Process monitor did give me some access denied entries when I try to start it but I was under the impression the sql configuration manager would take care of it. Unless this is something new in SQL Server 2012 does the agent account need to belong to the admin group?

Regarding the domain account. I don't have one this is a client system we are assisting with. I may end up leaving it as LocalSystem if its too much of a hassle. For what its worth this is also on Server 2012 and I already disabled user account control. The installation was performed with an admin added to the administrator group. Not the main local Admin.
Joie Andrew
Joie Andrew
SSCrazy
SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)SSCrazy (2.3K reputation)

Group: General Forum Members
Points: 2333 Visits: 2032
When you try and start the SQL Agent service under a local account and it fails do you get any logon failures in the security log in Event Viewer? If so can you post them? Also, can you verify that the local account that you want to start the service as has the "Log on as a Service" right? This should have been set when you configure the account in SQL Server Configuration Manager, but it is possible that this did not happen.

Joie Andrew
"Since 1982"
thepiecesfit
thepiecesfit
SSC Rookie
SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)

Group: General Forum Members
Points: 40 Visits: 76
Joie Andrew (8/7/2013)
When you try and start the SQL Agent service under a local account and it fails do you get any logon failures in the security log in Event Viewer? If so can you post them? Also, can you verify that the local account that you want to start the service as has the "Log on as a Service" right? This should have been set when you configure the account in SQL Server Configuration Manager, but it is possible that this did not happen.


It used to say access denied. It now says: The SQL Server Agent (MSSQLSERVER) service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion. Think that is result of adding full access to user NT SERVICE\SQLSERVERAGENT in path data\MSSQL11.MSSQLSERVER\MSSQL\Binn

Just confirmed User Rights Assignment > Log on as Service . The user SQL_agent_svc_usr does exist on the list.
thepiecesfit
thepiecesfit
SSC Rookie
SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)

Group: General Forum Members
Points: 40 Visits: 76
Process Monitor also shows a few ACCESS DENIED entries as I attempt to start the service. Here is one directly related to the agent:

Process Name: SQLAGENT.EXE

Operation: CreateFile

Path: D:\SQLData\data\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlsvc.dll

Result: ACCESS DENIED

Desired Access: Read Data/List Directory, http://www.sqlservercentral.com/Forums/Skins/Classic/Images/RichTextBoxTable/tbl_bottomleft.gifExecute/Traverse, Synchronize
Disposition: Open
Options: Synchronous IO Non-Alert, Non-Directory File
Attributes: n/a
ShareMode: Read, Delete
AllocationSize: n/a
durai nagarajan
durai nagarajan
SSCommitted
SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)SSCommitted (1.6K reputation)

Group: General Forum Members
Points: 1611 Visits: 2775
does NT AUTHORITY\NETWORK SERVICE has access to msdb with all sqlagent permissions.

Regards
Durai Nagarajan
thepiecesfit
thepiecesfit
SSC Rookie
SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)SSC Rookie (40 reputation)

Group: General Forum Members
Points: 40 Visits: 76
durai nagarajan (8/7/2013)
does NT AUTHORITY\NETWORK SERVICE has access to msdb with all sqlagent permissions.


I have granted NT AUTHORITY\NETWORK SERVICE the sysadmin server role. This should give it rights to everything.

However, it still will not start and gives the same ACCESS DENIED in process monitor to the path D:\SQLData\data\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlsvc.dll
Jacob Wilkins
Jacob Wilkins
Hall of Fame
Hall of Fame (3.3K reputation)Hall of Fame (3.3K reputation)Hall of Fame (3.3K reputation)Hall of Fame (3.3K reputation)Hall of Fame (3.3K reputation)Hall of Fame (3.3K reputation)Hall of Fame (3.3K reputation)Hall of Fame (3.3K reputation)

Group: General Forum Members
Points: 3286 Visits: 7728
Two questions:

1) Does the SQL Server error log show a login failure for that login when you try to start the Agent?

2) The "Access Denied" error you received looks more like a file system permissions issue. Have you checked file systems permissions?

Cheers!
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search