RE: SQL Agent won't start

From: Jonathan S (JonathanS_at_discussions.microsoft.com)
Date: 02/23/05


Date: Wed, 23 Feb 2005 03:39:03 -0800

Hi Mike. Both SQLServer and SQLAgent are now run under the Local System
Account as we have some networks "consultants" in who corrupted a specific
Windows Admin account which was used to start these services.

I have removed the BUILTIN\Administrators account from SQLServer to prevent
unauthorised access by anyone who is a member of Windows Administrators
group, so SLQAgent cannot connect to SQLServer using integrated security (and
therefore the reason why sa or another SQLServer sysadmin account is used for
SQLAgent to log in to SQLServer).

It is all a bit puzzling since it was all working fine last Friday.

Regards,
Jonathan

"Mike Epprecht (SQL MVP)" wrote:

> Hi
>
> What heappens when you use Integrated Security for the conenction from SQL
> Agent?
>
> Regards
> Mike
>
> "Jonathan S" wrote:
>
> > Our installation of SQLServer 2000 has been working fine until last week when
> > SQLAgent cannot start due to a login problem with SQLServer.
> >
> > SQLAgent properties have not changed since the problem began, but the event
> > log reports that SQLAgent cannot log on to SQLServer using the sa user. The
> > sa password has been correctly entered into SQLAgent properties page (in
> > Enterprise Manager) but this makes no difference, and using other SQLServer
> > sysadmin accounts also do not work. Interestingly, when a sysadmin account
> > other than sa is entered in the SQLAgent properties page (in Enterprise
> > Manager) and the info saved, the sysadmin user has been set back to sa when
> > the SQLAgent properties page is reopened.
> >
> > Using osql, I can log in to SQLServer using sa or any other sysadmin
> > account. Profiler simply shows log in failure for sa when I attempt to start
> > the SQLAgent service.
> >
> > Could this problem have been created by a Windows update running overnight?
> > It seems that this SQLAgent log in problem started after one such update, but
> > maybe I am being a little paranoid?
> >
> > Thanks in advance,
> > --
> > Jonathan S



Relevant Pages

  • Re: xp_sendmail works from QA but not from DTS package
    ... Do you use the same account for running both your SQLServer service and your ... then try to set SQLserver to use the same account ... as SQLAgent - the one that has the mailbox set up. ...
    (microsoft.public.sqlserver.server)
  • Re: SQL Agent wont start
    ... SQLServer and SQLAgent run, I had to change these services to start using ... Local System Account. ... SQLAgent but I suspect some more "fiddling" was done last week with Windows ... "Griff" wrote: ...
    (microsoft.public.sqlserver.server)
  • RE: Event ID: 17052 and Event ID: 322
    ... Meaning, if you use ... account 'A' to start sqlserver with, and account 'B' to start sqlagent ... to use account 'A' to start sqlserver with, and account 'C' or 'D' to start ...
    (microsoft.public.sqlserver.setup)
  • Re: Error 53: Cannot generate SSPI Context
    ... need to try to connect to sqlagent using sa account and password. ... I will then suggest re-booting the server. ... I vaguely remember it being something to do with the sqlagent service ... > error in the agent out file. ...
    (microsoft.public.sqlserver.server)
  • Re: Intranet connect to SQLServer Under users account.
    ... >> I have set up the Web site so that it uses Windows Integrated security, ... >> On a test webpage I can output the user account being used: ... >> SQLServer using their account. ...
    (microsoft.public.dotnet.framework.aspnet.security)