RE: Error 22022 when running SQLservices under different accounts

From: Ananth Padmanabham [MSFT] (ananthp_at_online.microsoft.com)
Date: 10/08/04


Date: Fri, 08 Oct 2004 18:02:42 GMT

If you are using the SQL Enterprise Manager (SEM) to change the service
startup accounts to use a non-admin account, then all should work fine. But
if you suspect that SEM is not setting some relevant file permissions or
registry permissiosn etc for your non-admin account, then you may want to
review this KB article for a complete list of permissions/rights which are
required for your Windows account:

How to change the SQL Server or SQL Server Agent Service account without
using SQL Enterprise Manager in SQL Server 2000 (283811)
http://support.microsoft.com/default.aspx?scid=KB;EN-US;283811

Thanks,
Ananth Padmanabham
Microsoft SQL Support

This posting is provided "AS IS" with no warranties, and confers no rights.
 Subscribe to MSDN & use http://msdn.microsoft.com/newsgroups.
--------------------
| From: "Per Williamson" <per.williamson@telia.com>
| Newsgroups: microsoft.public.sqlserver.setup
| Subject: Error 22022 when running SQLservices under different accounts
| Lines: 37
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
| Message-ID: <7nS1d.103381$dP1.371780@newsc.telia.net>
| Date: Wed, 15 Sep 2004 07:41:55 GMT
| NNTP-Posting-Host: 217.208.161.155
| X-Complaints-To: abuse@telia.com
| X-Trace: newsc.telia.net 1095234115 217.208.161.155 (Wed, 15 Sep 2004
09:41:55 CEST)
| NNTP-Posting-Date: Wed, 15 Sep 2004 09:41:55 CEST
| Organization: Telia Internet
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGXA03.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA0
1.phx.gbl!TK2MSFTNGP08.phx.gbl!news-out.cwix.com!news-out!pullfeed!newsfeed.
cwix.com!newsfeed.icl.net!newsfeed.freenet.de!news.tu-darmstadt.de!frankfurt
1.telia.de!news-stoc.telia.net!news-stoa.telia.net!telia.net!masternews.teli
a.net.!newsc.telia.net.POSTED!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.sqlserver.setup:66481
| X-Tomcat-NG: microsoft.public.sqlserver.setup
|
| Hi,
|
| I am following the recommendations from Microsoft to set up the
MSSqlserver
| and SQLAgent service to run under different domain user accounts. This I
am
| doing, as recommended, via Enterprise manager. The platforms are Windows
| server 2003 and SQL Server 2000, SP3.
|
| However, when trying to run a job I get the error 22022 "SQL Server Agent
| not currently running", even though the service IS running. Also, in the
SQL
| Agent error log I get the message "The data portion of event 17052 from
| MSSQL$Servername is missing".
|
| If I make the account for the MSSQLSERVER service a member of the
| administrators group it all sseem to work fine. This makes me believe that
| some necessary permission or setting in the registry is not being set up
| correctly by Enterprise Manager when changing the MSSQLSErver service
| account.
|
| The same problem was originally posted under the subject "SP3 causes
| SqlAgent jobs not run" by Michaela Judasova, but no valid solution was
| provided, as far as I can see. So please, Michaela ,or someone else with
an
| answer, help me out on this one!
|
| By the way, now when everyone is getting so concerned with security these
| days, itīs very annoying to find that following the Microsoft own
| recommendations to enhance security by setting upp the services to run
under
| different unprivileged accounts results in hours of unneccesary work. I
| suppose the only reason why this bug slipped out is that they donīt
| implement their own recommendations. Otherwise I think they would have
| discovered this. And this is not the first time. Iīve had a similar (but
not
| the same) problem before running SQL Server 7 under unprivileged accounts
| after loading a new SP.
|
| Thanks
| Per Williamson
|
|
|



Relevant Pages

  • Re: How to use EFS to encrypt SQL DB file
    ... You want to make sure that SQL is starting here with an ... account that has the right to decrypt the mdf file. ... For information about the Microsoft Strategic Technology ... Protection Program and to order your FREE Security Tool Kit, ...
    (microsoft.public.sqlserver.security)
  • Re: How can I grant user run cmdexec
    ... This can happen when the startup account for SQL Server ... could reset the service accounts through Enterprise Manager ... Change the SQL Server or SQL Server Agent Service ...
    (microsoft.public.sqlserver.security)
  • Re: sql problem
    ... Account # is the link field on ... The requirement is I have to come up with a report comparing the two ... customer tables to see if they are in sync. ... what I wanted to do was to get the SQL to return the "like" names ...
    (comp.databases.oracle.server)
  • Re: sql problem
    ... Account # is the link field on ... table1, table2@dblink where ....) ... customer tables to see if they are in sync. ... what I wanted to do was to get the SQL to return the "like" names ...
    (comp.databases.oracle.server)
  • Re: sql problem
    ... Account # is the link field on ... table1, table2@dblink where ....) ... customer tables to see if they are in sync. ... what I wanted to do was to get the SQL to return the "like" ...
    (comp.databases.oracle.server)