Pereira


Hello,

I'm having trouble running jobs with my active directory (ADS) account. I've setup my SQL services to run under an ADS account, but jobs cannot seem to query ADS for user information. We're running Windows Server 2003 and SQL Server 2005 SP2.

Here is the error message:

==

The job failed. Unable to determine if the owner (ADS\me) of job eFASRtest has server access (reason: Could not obtain information about Windows NT group/user 'ADS\me', error code 0x5. [SQLSTATE 42000] (Error 15404)).

==

also this message in log:

==

[298] SQLServer Error: 15404, Could not obtain information about Windows NT group/user 'ADS\me, error code 0x5. [SQLSTATE 42000] (ConnIsLoginSysAdmin)

==

I already tested the suggested:

execute as login='ads\me' and I get the same error on both (my local installations and production)

appreciate your help




Re: SQLSTATE 42000- Error 15404 with ADS

Jens K. Suessmeyer


Which service account is the SQL Server running with

Jens K. Suessmeyer

---
http://www.sqlserver2005.de
---







Re: SQLSTATE 42000- Error 15404 with ADS

Pereira

We are using the Local system account





Re: SQLSTATE 42000- Error 15404 with ADS

Raul Garcia - MS

Most likely the machine account doesn¡¯t have permission to query the AD.

I would recommend requesting access to the AD administrator or change SQL Server and run the service as a low-privileged domain account that has proper permissions on the AD.

-Raul Garcia

SDE/T

SQL Server Engine






Re: SQLSTATE 42000- Error 15404 with ADS

Jens K. Suessmeyer

Yes, as Raul mentioned, the Local Service does not have any rights to query / check the identity of the connecting user.

Jens K. Suessmeyer

---

http://www.sqlserver2005.de

---






Re: SQLSTATE 42000- Error 15404 with ADS

Pereira

Which kind of permissions this account needs





Re: SQLSTATE 42000- Error 15404 with ADS

Jens K. Suessmeyer

Members of the Domain should be enough.

Jens K. Suessmeyer

---
http://www.sqlserver2005.de
----






Re: SQLSTATE 42000- Error 15404 with ADS

carlssj

I have been receiving the same error - only intermittently. Popped up after installing SP2 on SQL 2005. For example a job that runs every ten minutes failed at 6:10, worked until 7:30 and then failed. Received the same error on both - Unable to determine if the owner of job... has server access (reason: Could not obtain information about Windows NT group/user 'ad\user', error code 0xea [SQLSTATE 42000] (Error 15404)

The ad account had administrator access on the server and in SQL. The service account also has administrator access.

Thanks for any help,

Sandy





Re: SQLSTATE 42000- Error 15404 with ADS

Kay Zumbusch

Hi.

In the company I'm working for we are planning to move from SQL Server 2000 to SQL Server 2005 but in our test environment we have the same problem. We are using a single Windows Server 2003 Active Directory. The SQL Server ist run with a standard domain user account (DOMAIN\sqlserver) without any special permissions or restrictions.

I am not able to run any scheduled job or any maintenance plan manually with my domain user account. My domain account is member of the SQL Server's host's administrators group and member of each admin group inside the SQL Server. The scheduled jobs are working fine if I set their owner to sa but that's not possible for the manually run maintenance jobs. The SQL Server is set to Windows authentication only.

If I add DOMAIN\sqlserver to the Domain Admins group of the Active Directory everything works fine. But this solution is inacceptable. What permissions does the service account need to access the Active Directory to check the permissions of a domain user

Kind regards

Kay Zumbusch