Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Can't start the SQL Server Agent

Posted on 2008-11-20
Medium Priority
Last Modified: 2012-05-05
Hi all

I have just installed SQL Server 2008 on a new server. After installation I have created new local users for each service of the SQL Server (sql server, sql server agent, Integration Service, OLAP and so on) and each user is member of the corresponding group created by the installation.
The user for the sql server agent for example is member of the group SQLServerSQLAgentUser$MSSQL2008-A$MSSQLSERVER 
This works fine for all services except for the agent which fails when I try to start the service. The event log shows the following messages:

Login failed for user 'MSSQL2008-A\SQLServerAgent'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: <local machine>]


SQLServerAgent could not be started (reason: Unable to connect to server '(local)'; SQLServerAgent cannot start).

Additional info: the server is not on an AD network&.. all the users I created for the services are local users

Please.... does someone have an idea.....

Question by:nicolajsb
  • 4
  • 2
LVL 20

Expert Comment

by:Marten Rune
ID: 23003689
Maybe you need to grant 'log on as a service' in local security policy?

LVL 20

Expert Comment

by:Marten Rune
ID: 23003719
can you do a runas in cmd prompt? i e:

c:\runas /u:SQLServiceAccount cmd
CMD will prompt for password. If it works it will open another CMD prompt. Just to see that the account works.

Try put it in local admin group, if the service starts, then you know its related to permissions somehow.

Come back with results.

Regards Marten

Author Comment

ID: 23003805
just checked.... "log on as service" is grandet by default to the group that is created when the SQL Server is installed and the "runas" thing works fine too.

I have tried to add the user to the Administrators group byt that didn't help either.

If I change the service account for the agent to "Local System" everything works.... but i guess it is best practice to create diticated user accounts for every service and use the groups created during the installation....

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

LVL 20

Expert Comment

by:Marten Rune
ID: 23005529
You could try to use the browse button when assigning the account.

If this doesn't work, try creating a new account and see if it will work with this account!


Author Comment

ID: 23033319
hmmm tried everything now.... recreating the account, reinstalling the SQL Server.... nothing helps. going back to "Network Service" as the service account for the Agent
LVL 20

Accepted Solution

Marten Rune earned 1500 total points
ID: 23040512
Hi there

The serviceaccount needs access to the database. It's not like with the sql service, witch doesn't need DB access itself. The agent is used to run jobs, and therefore it needs DB Access.

If its a hardened server, i e you have dropped the BUILTIN\Administrators group, or restricted its rights, this may be why it's not starting.

What is the error message in event viewer I want source, category and EventID


Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hi all, It is important and often overlooked to understand “Database properties”. Often we see questions about "log files" or "where is the database" and one of the easiest ways to get general information about your database is to use “Database p…
Ever needed a SQL 2008 Database replicated/mirrored/log shipped on another server but you can't take the downtime inflicted by initial snapshot or disconnect while T-logs are restored or mirror applied? You can use SQL Server Initialize from Backup…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question