Re: SQL Server 2008 bulk load error

Tech-Archive recommends: Fix windows errors by optimizing your registry

I see. Thanks for the detailed explanation (needed for me since I don't have "trust issues" up to
date). You didn't say what SQL command that your user is executing, but I going to assume BULK
INSERT or INSERT with subselect haing OPENROWSET and the bulk provider. The point is to understand
whether it is the SQL Server service which is accessing the file or something else (like Agent - if
you are using a scheduled job and integration services; for example). Say that it *is* SQL Server
that is accessing the file, then if the user in question has sysadmin SQL Server priviliges, then
the service account is attempted. This sees to fit with what you are seeing. One thing that *might*
be helpful is using Proxies and Credentials (see CREATE CREDENTIAL and Books Online index "proxy
accounts [SQL Server Agent]"). I'm not entirely certain it will help, though since a) the user might
be sysadmin and in that case the case *might* be that we'll habe no impersonation and b) your domain
and trust setup (but here my Windows/Ad copetence starts failing me).

--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi


"Blake" <blake.duffey@xxxxxxxxx> wrote in message news:e3ptyil0JHA.5764@xxxxxxxxxxxxxxxxxxxxxxx
This is moderately complicated :)

The SQL server service is running under a domain account in domain A.

The data is stored in a fileshare on a server in domain B.

There is a one-way trust between A and B. (Users from B have access to resources in A, but not
vice versa)

The user is running SQL Management studio from a workstation in domain B. She is using her domain
creds to access the SQL database.

After looking at the security logs, it looks like the SQL server is trying to make the connection
to the file server, but because of the one-way trust, the file server doesn't know how to handle
it.



Tibor Karaszi wrote:
Permission error (see the error message). Is this BULK INSERT or something else? Are you logged
on as a sysadmin login? Does the SQL Server account have permissions on the file in question?



.

Relevant Pages

  • Re: SQL account rights
    ... Please advice what is the best, suitable rights rather than domain admin ... Warren Brunk - MCITP - SQL 2005, ... Add it as a login to the SQL Server ... files, or backups, make sure that the service account has Full ...
    (microsoft.public.sqlserver.security)
  • Re: User authentication
    ... There are 2 SQL Server 2005 ... 1 SQL Server 2000 installed on another server ... Windows account instead to run backup jobs. ...
    (microsoft.public.sqlserver.clients)
  • Re: SQL 2000 Server gets hacked
    ... Thank you Beth. ... > placed a strong password on the 'sa' account?) ... Your SQl Service itself shouldn't be running as a ... (SQL Agent requires more, but not SQL Server). ...
    (microsoft.public.sqlserver.security)
  • Re: SQL 2000 Server gets hacked
    ... Thank you Beth. ... > placed a strong password on the 'sa' account?) ... Your SQl Service itself shouldn't be running as a ... (SQL Agent requires more, but not SQL Server). ...
    (microsoft.public.sqlserver.security)
  • Re: Microsoft Search service cannot be administered under the present user error SP3
    ... - Have not modified Administrator account, but i ran the SQL script anyway. ... SQL account is not a local administrator. ... > has this server ever been upgrade from SQL Server 7.0 or is this SQL ...
    (microsoft.public.sqlserver.fulltext)