Solved

service account is not sql login, but can backup.

Posted on 2011-03-16
21
978 Views
Last Modified: 2013-11-10

within a ssis package, there is a backup task. then this package is scheduled and run by the service account. even though the service account does not have a login, how is it successfully able to do the backup?

thanks
0
Comment
Question by:anushahanna
  • 12
  • 9
21 Comments
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35149661
Is that package scheduled to run in windows scheduled tasks or in sql server job?
What service account you mean ?
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35150298
sql server job. both sql and agent service account is the same.
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150413
Who is the owner of a job? It is executed in owners context, in the filesystem SQL server service account permissions are used.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35150459
owner is srbsv\jimwe
but this package is uploaded to integration server and then it is part of a step in the sql job. the only option in that step is that the service account will run it.

can you explain what is meant by "in the filesystem SQL server service account permissions are used."
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150584
I mean when you are creating backup in the filesystem SQL Server needs to create a file, and it's permissions are used for that.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35150682
OK- but who is running the package step in the job? service account, right?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150741
It depend how you are executing package, is this step of SSIS type, CMDExec type or sql with xp_cmdshell query?
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35151139
SSIS type
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35151245
You can execute SSIS step type by using either SQL Agent account or SSIS proxy account, if you have created one:

 ssis job
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35153320
thanks for showing the option other than service account.

but in my case, i am using service account only. he is not a login but how is the backup happening fine?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35154154
Can you verifz whether SQL Server Agent account has no access? (put there it's service account):
 
EXEC sys.xp_logininfo
@acctname = 'Domain\User'

Open in new window

0
 
LVL 6

Author Comment

by:anushahanna
ID: 35159631
exactly- the above query brings back blank.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35185906
Daniel, what do you infer from the above (service account is not a login by can backup through ssis package)?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35187032
We've determined so far that SQL Agent and SQL Server service accounts is the same account. You're saying that Agent account isn't login in SQL Server, are you 100% sure of it? By default SQL Server and Agent service accounts are added as logins in SQL Server RDBMS with sysadmin server roles. You can verify which service has which account in Sql Server Configuration Manager (start->run->(type) sqlservermanager10.msc).
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189433
yes, i confirmed the service accounts and that they are the same for sql and agent. now, you gave me a clue:

EXEC master..xp_logininfo 'NT SERVICE\MSSQL$POST04','members'
EXEC master..xp_logininfo 'NT SERVICE\ClusSvc','members'
EXEC master..xp_logininfo 'NT AUTHORITY\SYSTEM','members'
EXEC master..xp_logininfo 'NT SERVICE\SQLAgent$POST04','members'

are the ones i am not sure about in the logins- could one of these have the service account inside of it.

all of them return the error "Could not obtain information about Windows NT group/user, error code 0x8ac."
0
 
LVL 14

Accepted Solution

by:
Daniel_PL earned 500 total points
ID: 35189540
Look on priviledges of those accounts:

EXEC sys.xp_logininfo
@acctname = 'NT SERVICE\MSSQL$POST04'
...
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189600
i get

account name      type      privilege      mapped login name      permission path
NT SERVICE\MSSQL$POST04      group      admin      NT SERVICE\MSSQL$POST04      NULL

account name      type      privilege      mapped login name      permission path
NT SERVICE\SQLAgent$POST04      group      admin      NT SERVICE\SQLAgent$POST04      NULL

what is the admin here mean?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35189638
Admin is the sysadmin :)
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189671
ah! so that means that both service account (in this case it is the same) are sysadmins and that explains it..
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189674

thanks a lot Daniel. I see you are active in EE for past 2 weeks with lot of insight and experience.. hope you enjoy the experience...
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189696
Daniel, could you please give me your feedback on

http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/Q_26826520.html 

if the question interests you..

thanks again...
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
I have a large data set and a SSIS package. How can I load this file in multi threading?
Via a live example, show how to extract insert data into a SQL Server database table using the Import/Export option and Bulk Insert.
Viewers will learn how to use the SELECT statement in SQL and will be exposed to the many uses the SELECT statement has.

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now