• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1541
  • Last Modified:

Error executing job while sql srvr agent runs under local win account

Hi,
I'm facing this problem on one of my test box running SQL server 2008. I don't think this is related to SQL version but instead permissions...
I created a simple backup job and it fails if it runs under my domain account with following error:
The job failed.  Unable to determine if the owner (domain\user) of job test_bak has server access (reason: Could not obtain information about Windows NT group/user 'domain\user', error code 0x6ba. [SQLSTATE 42000] (Error 15404)).

If I change the owner of the job to "SA", it runs fine. SQL server agent is running under a local user account on the server and has SA rights on SQL server. I tried making this account member of windows administrators group but still the same error comes.

I then changed the sql agent account to run under my domain account and then change the owner of the job back to my domain account this time job runs fine.

So what is about this local user account under which sql agent is running causing this issue?
0
Rainbow002
Asked:
Rainbow002
  • 2
  • 2
2 Solutions
 
Guy Hengel [angelIII / a3]Billing EngineerCommented:
>I then changed the sql agent account to run under my domain account and then change the owner of the job back to my domain account this time job runs fine.

exactly.
if you just specify the job owner to be the windows account, the job system (sql agent) cannot verify the credentials.
running the sql agent under a windows account having the required permissions on the domain, this validation will work
0
 
Rainbow002Author Commented:
Hi Angel, I get that far but I'm still not clear why local account would have problem running job owned by domain account. I'm pretty sure I have seen when agent runs under local system account, I was able to run jobs under domain account...but I could be wrong. I guess this is one of the plus if service accts are running under domain account?
0
 
Guy Hengel [angelIII / a3]Billing EngineerCommented:
I repeat: the local account cannot verify the windows domain credentials, because the domain will not trust that local account to give out any information about the windows domain account.

it's like you, personally, could go to any bank clerk and ask about the CEO's salary.
you won't get it.
0
 
Rainbow002Author Commented:
Got you. Thanks for explaining.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now