SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Login Failure for NT Authority\System user


Login Failure for NT Authority\System user

Author
Message
mdn_2k5
mdn_2k5
SSC-Enthusiastic
SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)

Group: General Forum Members
Points: 152 Visits: 63
Hi Friends,

We have a prodution server which runs SQL Server 2005 (Std 64 Bit).

There is a "Login Failure for NT Authority\System" error logged in the error log every minute.

Error Message Details
--------------------
Date 6/15/2010 2:49:23 AM
Log SQL Server (Current - 6/15/2010 2:49:00 AM)
Source Logon
Message
Login failed for user 'NT AUTHORITY\SYSTEM'. [CLIENT: <local machine>]

We could nt find what exactly causes this issue.Please let me know any solutions,suggestions and comments about this issue.

Thanks in Advance
Dhayanithy
Henrico Bekker
Henrico Bekker
SSCertifiable
SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)

Group: General Forum Members
Points: 7221 Visits: 5011
You have a service trying to run/authenticate as NT Auth..... against your SQL Instance.

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
This thing is addressing problems that dont exist. Its solution-ism at its worst. We are dumbing down machines that are inherently superior. - Gilfoyle
Perry Whittle
Perry Whittle
SSC Guru
SSC Guru (50K reputation)SSC Guru (50K reputation)SSC Guru (50K reputation)SSC Guru (50K reputation)SSC Guru (50K reputation)SSC Guru (50K reputation)SSC Guru (50K reputation)SSC Guru (50K reputation)

Group: General Forum Members
Points: 50838 Visits: 17653
track the machine down using its ip address and find out what is trying to authenticate

-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs" ;-)
mdn_2k5
mdn_2k5
SSC-Enthusiastic
SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)

Group: General Forum Members
Points: 152 Visits: 63
Friends, Thanks for the Reply.

Here are few details I found on the server.

Below are the tasks which are run by the NT Authority\System user in the server.

1.EXECUTE msdb.dbo.sp_sqlagent_get_perf_counters - SQL Agent Alert Engine

2.SELECT ISNULL(SUSER_SNAME(), SUSER_NAME()) - SQL Agent EMail Logger

3.UPDATE msdb.dbo.sysjobactivity - SQL Agent Job Invocation Engine

4.msdb.dbo.sysmail_help_admin_account_sp;1 - SQL Agent90 - id <2764>

I suspect on the No.1 task which could cause the issue,since it is batched every minute when checked in the Activity Monitor.But not sure on what way its affecting.

Any ideas???

Thanks in advance
Dhayanithy
Henrico Bekker
Henrico Bekker
SSCertifiable
SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)SSCertifiable (7.2K reputation)

Group: General Forum Members
Points: 7221 Visits: 5011
grant sysadmin rights on SQL to NT Auth\SYSTEM and see if the error still occurs.

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
This thing is addressing problems that dont exist. Its solution-ism at its worst. We are dumbing down machines that are inherently superior. - Gilfoyle
mdn_2k5
mdn_2k5
SSC-Enthusiastic
SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)

Group: General Forum Members
Points: 152 Visits: 63
Hi Henrico Bekker,

Thanks a lot for the reply

The user NT Authority\System has SysAdmin rights already.

Thanks
Dhayanithy
mdn_2k5
mdn_2k5
SSC-Enthusiastic
SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)SSC-Enthusiastic (152 reputation)

Group: General Forum Members
Points: 152 Visits: 63
Hi Friends,

Just wanted to add this bit to the error message.Here in the message The state shown as 16.

Source : Logon
Message : Login failed for user 'NT AUTHORITY\SYSTEM'. [CLIENT: <local machine>]

Date : 6/14/2010 8:03:19 AM
Log : SQL Server (Current - 6/16/2010 2:02:00 AM)
Source : Logon
Message : Error: 18456, Severity: 14, State: 16.

Thanks in Advance
Dhayanithy
richardgazey
richardgazey
SSC Rookie
SSC Rookie (41 reputation)SSC Rookie (41 reputation)SSC Rookie (41 reputation)SSC Rookie (41 reputation)SSC Rookie (41 reputation)SSC Rookie (41 reputation)SSC Rookie (41 reputation)SSC Rookie (41 reputation)

Group: General Forum Members
Points: 41 Visits: 170
I had this happening - and it turned out to be a test installation of Microsoft reporting services -which was running as a service

It had been installed and developers tried and rejected it as a reporting tool.

May be worth a try
preity
preity
SSC Rookie
SSC Rookie (38 reputation)SSC Rookie (38 reputation)SSC Rookie (38 reputation)SSC Rookie (38 reputation)SSC Rookie (38 reputation)SSC Rookie (38 reputation)SSC Rookie (38 reputation)SSC Rookie (38 reputation)

Group: General Forum Members
Points: 38 Visits: 239
Had the same issue. Stopping the SQL Server Reporting Services worked for me.
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search