 |
|
 |
|
Next: multiple Pivot Tables, reset httpcontext(Request)..
|
| Author |
Message |
External

Since: Dec 18, 2003 Posts: 1
|
(Msg. 1) Posted: Wed Sep 15, 2004 4:21 am
Post subject: Error 22022 when running SQLservices under different account Archived from groups: microsoft>public>sqlserver>setup (more info?)
|
|
|
Hi,
I am following the recommendations from Microsoft to set up the MSSqlserver
and SQLAgent service to run under different domain user accounts. This I am
doing, as recommended, via Enterprise manager. The platforms are Windows
server 2003 and SQL Server 2000, SP3.
However, when trying to run a job I get the error 22022 "SQL Server Agent
not currently running", even though the service IS running. Also, in the SQL
Agent error log I get the message "The data portion of event 17052 from
MSSQL$Servername is missing".
If I make the account for the MSSQLSERVER service a member of the
administrators group it all sseem to work fine. This makes me believe that
some necessary permission or setting in the registry is not being set up
correctly by Enterprise Manager when changing the MSSQLSErver service
account.
The same problem was originally posted under the subject "SP3 causes
SqlAgent jobs not run" by Michaela Judasova, but no valid solution was
provided, as far as I can see. So please, Michaela ,or someone else with an
answer, help me out on this one!
By the way, now when everyone is getting so concerned with security these
days, itīs very annoying to find that following the Microsoft own
recommendations to enhance security by setting upp the services to run under
different unprivileged accounts results in hours of unneccesary work. I
suppose the only reason why this bug slipped out is that they donīt
implement their own recommendations. Otherwise I think they would have
discovered this. And this is not the first time. Iīve had a similar (but not
the same) problem before running SQL Server 7 under unprivileged accounts
after loading a new SP.
Thanks
Per Williamson >> Stay informed about: Error 22022 when running SQLservices under different accou.. |
|
| Back to top |
|
 |  |
External

Since: Mar 22, 2004 Posts: 11
|
(Msg. 2) Posted: Fri Oct 08, 2004 2:21 pm
Post subject: RE: Error 22022 when running SQLservices under different acc [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
If you are using the SQL Enterprise Manager (SEM) to change the service
startup accounts to use a non-admin account, then all should work fine. But
if you suspect that SEM is not setting some relevant file permissions or
registry permissiosn etc for your non-admin account, then you may want to
review this KB article for a complete list of permissions/rights which are
required for your Windows account:
How to change the SQL Server or SQL Server Agent Service account without
using SQL Enterprise Manager in SQL Server 2000 (283811)
http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811
Thanks,
Ananth Padmanabham
Microsoft SQL Support
This posting is provided "AS IS" with no warranties, and confers no rights.
Subscribe to MSDN & use http://msdn.microsoft.com/newsgroups.
--------------------
| From: "Per Williamson"
| Newsgroups: microsoft.public.sqlserver.setup
| Subject: Error 22022 when running SQLservices under different accounts
| Lines: 37
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
| Message-ID:
| Date: Wed, 15 Sep 2004 07:41:55 GMT
| NNTP-Posting-Host: 217.208.161.155
| X-Complaints-To: abuse DeleteThis @telia.com
| X-Trace: newsc.telia.net 1095234115 217.208.161.155 (Wed, 15 Sep 2004
09:41:55 CEST)
| NNTP-Posting-Date: Wed, 15 Sep 2004 09:41:55 CEST
| Organization: Telia Internet
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGXA03.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA0
1.phx.gbl!TK2MSFTNGP08.phx.gbl!news-out.cwix.com!news-out!pullfeed!newsfeed.
cwix.com!newsfeed.icl.net!newsfeed.freenet.de!news.tu-darmstadt.de!frankfurt
1.telia.de!news-stoc.telia.net!news-stoa.telia.net!telia.net!masternews.teli
a.net.!newsc.telia.net.POSTED!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.sqlserver.setup:66481
| X-Tomcat-NG: microsoft.public.sqlserver.setup
|
| Hi,
|
| I am following the recommendations from Microsoft to set up the
MSSqlserver
| and SQLAgent service to run under different domain user accounts. This I
am
| doing, as recommended, via Enterprise manager. The platforms are Windows
| server 2003 and SQL Server 2000, SP3.
|
| However, when trying to run a job I get the error 22022 "SQL Server Agent
| not currently running", even though the service IS running. Also, in the
SQL
| Agent error log I get the message "The data portion of event 17052 from
| MSSQL$Servername is missing".
|
| If I make the account for the MSSQLSERVER service a member of the
| administrators group it all sseem to work fine. This makes me believe that
| some necessary permission or setting in the registry is not being set up
| correctly by Enterprise Manager when changing the MSSQLSErver service
| account.
|
| The same problem was originally posted under the subject "SP3 causes
| SqlAgent jobs not run" by Michaela Judasova, but no valid solution was
| provided, as far as I can see. So please, Michaela ,or someone else with
an
| answer, help me out on this one!
|
| By the way, now when everyone is getting so concerned with security these
| days, itīs very annoying to find that following the Microsoft own
| recommendations to enhance security by setting upp the services to run
under
| different unprivileged accounts results in hours of unneccesary work. I
| suppose the only reason why this bug slipped out is that they donīt
| implement their own recommendations. Otherwise I think they would have
| discovered this. And this is not the first time. Iīve had a similar (but
not
| the same) problem before running SQL Server 7 under unprivileged accounts
| after loading a new SP.
|
| Thanks
| Per Williamson
|
|
| >> Stay informed about: Error 22022 when running SQLservices under different accou.. |
|
| Back to top |
|
 |  |
External

Since: Sep 08, 2004 Posts: 1
|
(Msg. 3) Posted: Mon Nov 01, 2004 1:44 pm
Post subject: Re: Error 22022 when running SQLservices under different acc [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
"Ananth Padmanabham [MSFT]" wrote in
message
> If you are using the SQL Enterprise Manager (SEM) to change the
service
> startup accounts to use a non-admin account, then all should work
fine. But
> if you suspect that SEM is not setting some relevant file permissions
or
> registry permissiosn etc for your non-admin account, then you may
want to
> review this KB article for a complete list of permissions/rights which
are
> required for your Windows account:
>
> How to change the SQL Server or SQL Server Agent Service account
without
> using SQL Enterprise Manager in SQL Server 2000 (283811)
<font color=purple> > <a rel="nofollow" style='text-decoration: none;' href="http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811</font" target="_blank">http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811</font</a>>
I'm experiencing the EXACT same problem on various boxes - tried the
above several times - doesn't help.
What helps the best so far, is running SQL Agent and SQL Server on the
same low priviledged account - this will enable you to run in a low
priviledged environment. But separate accounts won't work, even though
you configure them to the same settings. To run separate accounts, you
how to run with high privilege (local admin or similar), which sorta
defies the purpose.
MS should really look into this - I see lots of posts about it - always
the same reply - but it just doesn't help.
My configuration is:
W2K3 Standard - in a domain.
Service accounts are local accounts.
SQL Server 2000 installed, immidiately updated to SP3a + the cumulative
patch pack.
Best regards
Brian Klausen >> Stay informed about: Error 22022 when running SQLservices under different accou.. |
|
| Back to top |
|
 |  |
External

Since: Sep 02, 2004 Posts: 4
|
(Msg. 4) Posted: Tue Dec 14, 2004 11:27 am
Post subject: Re: Error 22022 when running SQLservices under different acc [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
Brian is right. I am having the exact same problem. For whatever reason I
cannot use two different accounts to run the sql server and the sql service
agent. The same two error messages continue to appear in my event log:
Event ID: 17052 You do not have sufficient operating system permission to
opent he SQLServerAgent status event.
Event ID: 322
The data portion of event 17052 from MSSQLSERVER is invalid
I noticed that these messages appear even when I double click a job to check
its properties in the "Jobs" folder. DOES ANYBODY ELSE HAVE ANY USEFUL
ADVICE ON HOW TO RESOLVE THIS ISSUE??!!!???
"Brian Klausen" wrote:
> > If you are using the SQL Enterprise Manager (SEM) to change the
> service
> > startup accounts to use a non-admin account, then all should work
> fine. But
> > if you suspect that SEM is not setting some relevant file permissions
> or
> > registry permissiosn etc for your non-admin account, then you may
> want to
> > review this KB article for a complete list of permissions/rights which
> are
> > required for your Windows account:
> >
> > How to change the SQL Server or SQL Server Agent Service account
> without
> > using SQL Enterprise Manager in SQL Server 2000 (283811)
<font color=green> > > <a rel="nofollow" style='text-decoration: none;' href="http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811</font" target="_blank">http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811</font</a>>
>
> I'm experiencing the EXACT same problem on various boxes - tried the
> above several times - doesn't help.
>
> What helps the best so far, is running SQL Agent and SQL Server on the
> same low priviledged account - this will enable you to run in a low
> priviledged environment. But separate accounts won't work, even though
> you configure them to the same settings. To run separate accounts, you
> how to run with high privilege (local admin or similar), which sorta
> defies the purpose.
>
> MS should really look into this - I see lots of posts about it - always
> the same reply - but it just doesn't help.
>
> My configuration is:
> W2K3 Standard - in a domain.
> Service accounts are local accounts.
> SQL Server 2000 installed, immidiately updated to SP3a + the cumulative
> patch pack.
>
> Best regards
> Brian Klausen
>
>
> >> Stay informed about: Error 22022 when running SQLservices under different accou.. |
|
| Back to top |
|
 |  |
External

Since: Nov 05, 2004 Posts: 13
|
(Msg. 5) Posted: Tue Dec 14, 2004 3:33 pm
Post subject: Re: Error 22022 when running SQLservices under different acc [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
Well, why not have a Domain account created, with the require privs, and
then use this account as the 'log on' account for both services? This is
what we do and it works just fine for us. BTW, ours is not a high level
account. We use this approach because it is what we need for a SQL service
to work across our domains. This allows us to dump the databases directly to
a store box.
HTH
"User" wrote in message
> Brian is right. I am having the exact same problem. For whatever reason
I
> cannot use two different accounts to run the sql server and the sql
service
> agent. The same two error messages continue to appear in my event log:
> Event ID: 17052 You do not have sufficient operating system permission
to
> opent he SQLServerAgent status event.
> Event ID: 322
> The data portion of event 17052 from MSSQLSERVER is invalid
>
> I noticed that these messages appear even when I double click a job to
check
> its properties in the "Jobs" folder. DOES ANYBODY ELSE HAVE ANY USEFUL
> ADVICE ON HOW TO RESOLVE THIS ISSUE??!!!???
>
>
>
> "Brian Klausen" wrote:
>
> > > If you are using the SQL Enterprise Manager (SEM) to change the
> > service
> > > startup accounts to use a non-admin account, then all should work
> > fine. But
> > > if you suspect that SEM is not setting some relevant file permissions
> > or
> > > registry permissiosn etc for your non-admin account, then you may
> > want to
> > > review this KB article for a complete list of permissions/rights which
> > are
> > > required for your Windows account:
> > >
> > > How to change the SQL Server or SQL Server Agent Service account
> > without
> > > using SQL Enterprise Manager in SQL Server 2000 (283811)
<font color=brown> > > > <a rel="nofollow" style='text-decoration: none;' href="http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811</font" target="_blank">http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811</font</a>>
> >
> > I'm experiencing the EXACT same problem on various boxes - tried the
> > above several times - doesn't help.
> >
> > What helps the best so far, is running SQL Agent and SQL Server on the
> > same low priviledged account - this will enable you to run in a low
> > priviledged environment. But separate accounts won't work, even though
> > you configure them to the same settings. To run separate accounts, you
> > how to run with high privilege (local admin or similar), which sorta
> > defies the purpose.
> >
> > MS should really look into this - I see lots of posts about it - always
> > the same reply - but it just doesn't help.
> >
> > My configuration is:
> > W2K3 Standard - in a domain.
> > Service accounts are local accounts.
> > SQL Server 2000 installed, immidiately updated to SP3a + the cumulative
> > patch pack.
> >
> > Best regards
> > Brian Klausen
> >
> >
> > >> Stay informed about: Error 22022 when running SQLservices under different accou.. |
|
| Back to top |
|
 |  |
External

Since: Sep 02, 2004 Posts: 4
|
(Msg. 6) Posted: Tue Dec 14, 2004 5:19 pm
Post subject: Re: Error 22022 when running SQLservices under different acc [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
I have already created two different local user accounts with the necessary
permissions. Both services run fine if running under one of the accounts I
created but I get the infamous error messages when trying to run the Agent
service under one account and the SQL User service under another. It just
doesn't like two different accounts to handle each of the services.
"JD" wrote:
> Well, why not have a Domain account created, with the require privs, and
> then use this account as the 'log on' account for both services? This is
> what we do and it works just fine for us. BTW, ours is not a high level
> account. We use this approach because it is what we need for a SQL service
> to work across our domains. This allows us to dump the databases directly to
> a store box.
>
> HTH
>
>
> > Brian is right. I am having the exact same problem. For whatever reason
> I
> > cannot use two different accounts to run the sql server and the sql
> service
> > agent. The same two error messages continue to appear in my event log:
> > Event ID: 17052 You do not have sufficient operating system permission
> to
> > opent he SQLServerAgent status event.
> > Event ID: 322
> > The data portion of event 17052 from MSSQLSERVER is invalid
> >
> > I noticed that these messages appear even when I double click a job to
> check
> > its properties in the "Jobs" folder. DOES ANYBODY ELSE HAVE ANY USEFUL
> > ADVICE ON HOW TO RESOLVE THIS ISSUE??!!!???
> >
> >
> >
> > "Brian Klausen" wrote:
> >
> > > > If you are using the SQL Enterprise Manager (SEM) to change the
> > > service
> > > > startup accounts to use a non-admin account, then all should work
> > > fine. But
> > > > if you suspect that SEM is not setting some relevant file permissions
> > > or
> > > > registry permissiosn etc for your non-admin account, then you may
> > > want to
> > > > review this KB article for a complete list of permissions/rights which
> > > are
> > > > required for your Windows account:
> > > >
> > > > How to change the SQL Server or SQL Server Agent Service account
> > > without
> > > > using SQL Enterprise Manager in SQL Server 2000 (283811)
<font color=brown> > > > > <a rel="nofollow" style='text-decoration: none;' href="http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811</font" target="_blank">http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811</font</a>>
> > >
> > > I'm experiencing the EXACT same problem on various boxes - tried the
> > > above several times - doesn't help.
> > >
> > > What helps the best so far, is running SQL Agent and SQL Server on the
> > > same low priviledged account - this will enable you to run in a low
> > > priviledged environment. But separate accounts won't work, even though
> > > you configure them to the same settings. To run separate accounts, you
> > > how to run with high privilege (local admin or similar), which sorta
> > > defies the purpose.
> > >
> > > MS should really look into this - I see lots of posts about it - always
> > > the same reply - but it just doesn't help.
> > >
> > > My configuration is:
> > > W2K3 Standard - in a domain.
> > > Service accounts are local accounts.
> > > SQL Server 2000 installed, immidiately updated to SP3a + the cumulative
> > > patch pack.
> > >
> > > Best regards
> > > Brian Klausen
> > >
> > >
> > >
>
>
> >> Stay informed about: Error 22022 when running SQLservices under different accou.. |
|
| Back to top |
|
 |  |
| Related Topics: | Which Account Type Do You Normally Use for the Service Acc.. - I'm getting ready to install SQL 2005 Standard on a couple servers in a DMZ. I'm curious as to which account type you normally use for the service account? Do you typically use a domain (or local) user account, Local System, or some other built-in..
Error Running Script: Replsys.SQL(1) during SQL 2000 SP3 u.. - Hey guys I was attempting to upgrade my SQL 2000 Developer version when I rcvd the message Error running script:Replsys.sql(1). When I hit the OKAY button to the error message it closed down the install. How do I correct and reinstall from that point....
.Net 2.0 Framework error when running EXE remotely - Hi, I am building a VB.Net 2005 application that will access a SQL Server 2005 database. If I run the EXE locally on the computer running SQL Server _or_ copy the EXE to a remote computer, the application works as expected. (Note I am logged in as....
Error Running Script: replsys.sql during installation SP4 .. - When I try to install SP4 on a W2003-Server with SQL 2000 Developer (both German version), I get the error message with "replsys.sql". I tried alread the following hints - stop many services - create C:\TMP and C:\TEMP directory for TMP and TE...
No app for running SQL - I have the same problem, no app to run and configure SQL server in sbs 2003 |
|
You can post new topics in this forum You can reply to topics in this forum You can edit your posts in this forum You can delete your posts in this forum You can vote in polls in this forum
|
|
|
|
 |
|
|