FTS Security Issue

From: Norman (anonymous_at_discussions.microsoft.com)
Date: 05/28/04

  • Next message: Norman: "RE: FTS Security Issue" 
    Date: Fri, 28 May 2004 10:46:07 -0700

    Hi,

    FTS will not populate the catalogs. 0 Items.

    I have a new installation W2003 with SQL2K Sp3.

    The SQL Server is running with a high security configuration.
    All the SQL services are running under an account Domain\SQLService which is a plain old user in the domain and on the SQL Server box.

    The local system account was chosen during installation. I changed to the domain user via the Enterprise Manager after the fact. SQL Server and SQL Agent run fine. BUILTIN\Administrators has been removed.

    I saw a post that said changing the service account from one account and back to the original should fix the problem. It did not. I see "Login failed for NT AUTHORITY\SYSTEM" in the SQL Error Log when I try to build the catalog. I checked the account that is running MS Search in the Services dialog and it is still Local System. When I changed accounts on SQL Server, I changed it to myself a local admin and then back to the Domain\SQLService account. I tried changing the MS Search account via the Services dialog to Domain\SQLService account and now it will not start. Domain\SQLService has full control on the FTDATA directory. Any other directories or registery keys that perhaps Domain\SQLService needs access to, but is not being set?

    Thanks,
    Norman

  • Next message: Norman: "RE: FTS Security Issue"

    Relevant Pages

    • Re: MSSQL HEllo bug
      ... Microsoft claims that the default for SQL Server 2000 is a domain user NOT ... domain account as the service account during the installation phase. ... exists OR simply click the LocalSystem radio button to save themselves the ...
      (NT-Bugtraq)
    • Re: Error 15401 using sp_grantlogin (not addressed by current KB articles)
      ... Restarting Windows 2000 resolved the problem for this particular account, ... confused when it sees a duplicate SID. ... > One way to get SQL Server to agree with the renamed NT ... > Preview (to ensure the script was created), ...
      (microsoft.public.sqlserver.security)
    • Re: SharePoint V3 Install Error
      ... But it our case it had to do with Group Policies that forbid the account of ... WSS FAQ:www.wssv3faq.com/wss.collutions.com ... Event Source: WindowsSharePointServices3Search ... whatever you are installing WSS as sufficient rights to the SQL Server ...
      (microsoft.public.sharepoint.windowsservices)
    • RE: Problems with WebParts
      ... to a database called aspnetdb. ... > The connection string specifies a local SQL Server Express instance using a ... > server account must have read and write access to the applications directory. ... > This is necessary because the web server account will automatically create ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Cannot connect to Query Analyzer
      ... For Query Analyzer, I tried replacing the file as you suggested but had the ... same results (Enterprise Manager starts up fine, ... I created an account on my laptop and changed SQL ... Try replacing the MMC app for SQL Server from the original ...
      (microsoft.public.sqlserver.connect)