January 25, 2006 at 11:05 am
Install: Win2000 Standard + MSSQL2000/SP4
Hi,
i'm noticing quite a few entries in the mssql error logs for the following ...
Login failed for user 'NT AUTHORITY\SYSTEM'.
It's a clean server and it started happening when a vendor installed an application . The app service is set to "log on as local system account". I've removed the BUILTIN\Administrator account in mssql. As a test, I also changed the service to "log on as this account ...domain\user " which is a domain NT account used by DBA is is sa in mssql. I'm still seeing some entries in the error logs.
Any thoughts?
Many thanks. Jeff
January 25, 2006 at 11:15 am
If the application is logging in as the log an as the local system account, That's seen as NT AUTHORITY\SYSTEM by SQL Server. If you don't have BUILTIN\Administrators with access any longer, that account no longer has a way in. What you can do is grant a login to NT AUTHORITY\SYSTEM and give it the appropriate access to the application's database. See if that resolves the issue.
As for what other attempts you're getting, that's a good question. You could run a profiler trace and look for Audit Logon Failures. That should give you an idea of what application is hitting the server.
K. Brian Kelley
@kbriankelley
Viewing 2 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply