NTRights & SQL Service Account Security

[Guest BigSam]

I trying to configure SQL to run with a user account - not administrator

account.

I'm running SQL 2k5 with a domain account. I think I've followed all of the

security configuration changes for the account, but when trying to restart

SQL on one server it fails. (It starts on 2 other servers.)

I went back to review the changes I applied with NTRights & ran ShowPriv for

some of the Windows Privledges. Something must have gotten screwed up on this

server, because I get errors when running showpriv. Follows is part of the

output from ShowPriv:

The LookupAccountSid() API returned error 0x00000534

Since I think NTRights was run on an non-existant account, how do I clean up

the settings?

Is it possible this error is causing SQL to not start on this one server?

[Guest S. Pidgorny]

Doyou see logon event for the account, and what happens if you use

another account?

 

--

Svyatoslav Pidgorny, MCSE, RHCE

-= F1 is the key =-

 

http://sl.mvps.org http://msmvps.com/blogs/sp

 

BigSam wrote:<span style="color:blue">

> I trying to configure SQL to run with a user account - not administrator

> account.

> I'm running SQL 2k5 with a domain account. I think I've followed all of the

> security configuration changes for the account, but when trying to restart

> SQL on one server it fails. (It starts on 2 other servers.)

> I went back to review the changes I applied with NTRights & ran ShowPriv for

> some of the Windows Privledges. Something must have gotten screwed up on this

> server, because I get errors when running showpriv. Follows is part of the

> output from ShowPriv:

> The LookupAccountSid() API returned error 0x00000534

> Since I think NTRights was run on an non-existant account, how do I clean up

> the settings?

> Is it possible this error is causing SQL to not start on this one server?</span>