Re: Log Shipping

From: Olu Adedeji (OluAdedeji_at_discussions.microsoft.com)
Date: 12/22/04


Date: Tue, 21 Dec 2004 16:43:02 -0800

Select and Update permissions on the msdb.dbo.log_shipping_primaries
for the sqlserver start up account would have been ok.

the above table is updated by the backup log job on the primary server in
the logshipping pair.

"bill" wrote:

> I added the account I'm using for SQL Server service to db owner group, and
> now it works fine.
> Thanks for your help.
> -Bill
>
> "Mike Hodgson" <mwh_junk@hotmail.com> wrote in message
> news:uFeAtUw5EHA.3644@tk2msftngp13.phx.gbl...
> > Bill,
> >
> > I spent a while fiddling around with permissions to get log shipping to
> > work right and in the end I just added the service accounts for both my
> > primary SQL instance and my secondary SQL instance to sysadmins on my
> > monitor box. It's probably overkill but nothing (except for the log
> > shipping coordination info) is kept on the monitor box and my primary &
> > secondary service accounts are pretty secure.
> >
> > I expect the secondary is probably calling some stored procs during the
> > update of the msdb.dbo.log_shipping tables at a guess (like
> > msdb.dbo.sp_log_shipping_monitor_restore perhaps?). Maybe adding the
> > accounts to db_owners in msdb on the monitor box would do the trick, if
> > you're concerned about super-tight security on your monitor box.
> >
> > Cheers,
> > Mike.
> >
> > bill wrote:
> > > The log shipping works fine, but the destination server is not updating
> the
> > > monitor server 'log_shipping_secondaries' table, so I am getting out of
> sync
> > > errors.
> > >
> > > I had the destination server using the localsystem account, and I
> thought
> > > this might be a problem updating a table on another server, so I changed
> it
> > > to a network account. I created a login for this account and a user in
> > > msdb, and gave it permissions to update the log_shipping_secondaries
> table
> > > in msdb, but it still isn't happening.
> > >
> > > I expect I am just doing something dumb, but I can't figure out what it
> is.
> > >
> > > I would appreciate any thoughts on this.
> > >
> > > thanks
> > > Bill
> > >
> > >
>
>
>



Relevant Pages

  • Re: remove user
    ... > I attach or restore database to another sql instance on ... > I remove the accounts attached to the restored database. ...
    (microsoft.public.sqlserver.security)
  • Re: remove user
    ... Thanks Steve, that's exactly what I was looking for ... >> I attach or restore database to another sql instance on ... >> I remove the accounts attached to the restored ...
    (microsoft.public.sqlserver.security)
  • remove user
    ... I attach or restore database to another sql instance on ... the same account already existing on new server. ... I remove the accounts attached to the restored database. ...
    (microsoft.public.sqlserver.security)