SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Login Failure for NT Authority\System user


Login Failure for NT Authority\System user

Author
Message
mdn_2k5
mdn_2k5
Valued Member
Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)

Group: General Forum Members
Points: 60 Visits: 63
Hi Friends,

We have a prodution server which runs SQL Server 2005 (Std 64 Bit).

There is a "Login Failure for NT Authority\System" error logged in the error log every minute.

Error Message Details
--------------------
Date 6/15/2010 2:49:23 AM
Log SQL Server (Current - 6/15/2010 2:49:00 AM)
Source Logon
Message
Login failed for user 'NT AUTHORITY\SYSTEM'. [CLIENT: <local machine>]

We could nt find what exactly causes this issue.Please let me know any solutions,suggestions and comments about this issue.

Thanks in Advance
Dhayanithy
Henrico Bekker
Henrico Bekker
Hall of Fame
Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)

Group: General Forum Members
Points: 3682 Visits: 4362
You have a service trying to run/authenticate as NT Auth..... against your SQL Instance.
Perry Whittle
Perry Whittle
SSC-Insane
SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)

Group: General Forum Members
Points: 20198 Visits: 17244
track the machine down using its ip address and find out what is trying to authenticate

-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs" ;-)
mdn_2k5
mdn_2k5
Valued Member
Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)

Group: General Forum Members
Points: 60 Visits: 63
Friends, Thanks for the Reply.

Here are few details I found on the server.

Below are the tasks which are run by the NT Authority\System user in the server.

1.EXECUTE msdb.dbo.sp_sqlagent_get_perf_counters - SQL Agent Alert Engine

2.SELECT ISNULL(SUSER_SNAME(), SUSER_NAME()) - SQL Agent EMail Logger

3.UPDATE msdb.dbo.sysjobactivity - SQL Agent Job Invocation Engine

4.msdb.dbo.sysmail_help_admin_account_sp;1 - SQL Agent90 - id <2764>

I suspect on the No.1 task which could cause the issue,since it is batched every minute when checked in the Activity Monitor.But not sure on what way its affecting.

Any ideas???

Thanks in advance
Dhayanithy
Henrico Bekker
Henrico Bekker
Hall of Fame
Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)Hall of Fame (3.7K reputation)

Group: General Forum Members
Points: 3682 Visits: 4362
grant sysadmin rights on SQL to NT Auth\SYSTEM and see if the error still occurs.
mdn_2k5
mdn_2k5
Valued Member
Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)

Group: General Forum Members
Points: 60 Visits: 63
Hi Henrico Bekker,

Thanks a lot for the reply

The user NT Authority\System has SysAdmin rights already.

Thanks
Dhayanithy
mdn_2k5
mdn_2k5
Valued Member
Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)Valued Member (60 reputation)

Group: General Forum Members
Points: 60 Visits: 63
Hi Friends,

Just wanted to add this bit to the error message.Here in the message The state shown as 16.

Source : Logon
Message : Login failed for user 'NT AUTHORITY\SYSTEM'. [CLIENT: <local machine>]

Date : 6/14/2010 8:03:19 AM
Log : SQL Server (Current - 6/16/2010 2:02:00 AM)
Source : Logon
Message : Error: 18456, Severity: 14, State: 16.

Thanks in Advance
Dhayanithy
richardgazey
richardgazey
Grasshopper
Grasshopper (13 reputation)Grasshopper (13 reputation)Grasshopper (13 reputation)Grasshopper (13 reputation)Grasshopper (13 reputation)Grasshopper (13 reputation)Grasshopper (13 reputation)Grasshopper (13 reputation)

Group: General Forum Members
Points: 13 Visits: 170
I had this happening - and it turned out to be a test installation of Microsoft reporting services -which was running as a service

It had been installed and developers tried and rejected it as a reporting tool.

May be worth a try
preity
preity
Grasshopper
Grasshopper (12 reputation)Grasshopper (12 reputation)Grasshopper (12 reputation)Grasshopper (12 reputation)Grasshopper (12 reputation)Grasshopper (12 reputation)Grasshopper (12 reputation)Grasshopper (12 reputation)

Group: General Forum Members
Points: 12 Visits: 239
Had the same issue. Stopping the SQL Server Reporting Services worked for me.
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search