Solved

service account is not sql login, but can backup.

Posted on 2011-03-16
21
979 Views
Last Modified: 2013-11-10

within a ssis package, there is a backup task. then this package is scheduled and run by the service account. even though the service account does not have a login, how is it successfully able to do the backup?

thanks
0
Comment
Question by:anushahanna
  • 12
  • 9
21 Comments
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35149661
Is that package scheduled to run in windows scheduled tasks or in sql server job?
What service account you mean ?
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35150298
sql server job. both sql and agent service account is the same.
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150413
Who is the owner of a job? It is executed in owners context, in the filesystem SQL server service account permissions are used.
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 
LVL 6

Author Comment

by:anushahanna
ID: 35150459
owner is srbsv\jimwe
but this package is uploaded to integration server and then it is part of a step in the sql job. the only option in that step is that the service account will run it.

can you explain what is meant by "in the filesystem SQL server service account permissions are used."
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150584
I mean when you are creating backup in the filesystem SQL Server needs to create a file, and it's permissions are used for that.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35150682
OK- but who is running the package step in the job? service account, right?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150741
It depend how you are executing package, is this step of SSIS type, CMDExec type or sql with xp_cmdshell query?
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35151139
SSIS type
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35151245
You can execute SSIS step type by using either SQL Agent account or SSIS proxy account, if you have created one:

 ssis job
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35153320
thanks for showing the option other than service account.

but in my case, i am using service account only. he is not a login but how is the backup happening fine?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35154154
Can you verifz whether SQL Server Agent account has no access? (put there it's service account):
 
EXEC sys.xp_logininfo
@acctname = 'Domain\User'

Open in new window

0
 
LVL 6

Author Comment

by:anushahanna
ID: 35159631
exactly- the above query brings back blank.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35185906
Daniel, what do you infer from the above (service account is not a login by can backup through ssis package)?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35187032
We've determined so far that SQL Agent and SQL Server service accounts is the same account. You're saying that Agent account isn't login in SQL Server, are you 100% sure of it? By default SQL Server and Agent service accounts are added as logins in SQL Server RDBMS with sysadmin server roles. You can verify which service has which account in Sql Server Configuration Manager (start->run->(type) sqlservermanager10.msc).
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189433
yes, i confirmed the service accounts and that they are the same for sql and agent. now, you gave me a clue:

EXEC master..xp_logininfo 'NT SERVICE\MSSQL$POST04','members'
EXEC master..xp_logininfo 'NT SERVICE\ClusSvc','members'
EXEC master..xp_logininfo 'NT AUTHORITY\SYSTEM','members'
EXEC master..xp_logininfo 'NT SERVICE\SQLAgent$POST04','members'

are the ones i am not sure about in the logins- could one of these have the service account inside of it.

all of them return the error "Could not obtain information about Windows NT group/user, error code 0x8ac."
0
 
LVL 14

Accepted Solution

by:
Daniel_PL earned 500 total points
ID: 35189540
Look on priviledges of those accounts:

EXEC sys.xp_logininfo
@acctname = 'NT SERVICE\MSSQL$POST04'
...
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189600
i get

account name      type      privilege      mapped login name      permission path
NT SERVICE\MSSQL$POST04      group      admin      NT SERVICE\MSSQL$POST04      NULL

account name      type      privilege      mapped login name      permission path
NT SERVICE\SQLAgent$POST04      group      admin      NT SERVICE\SQLAgent$POST04      NULL

what is the admin here mean?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35189638
Admin is the sysadmin :)
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189671
ah! so that means that both service account (in this case it is the same) are sysadmins and that explains it..
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189674

thanks a lot Daniel. I see you are active in EE for past 2 weeks with lot of insight and experience.. hope you enjoy the experience...
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189696
Daniel, could you please give me your feedback on

http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/Q_26826520.html 

if the question interests you..

thanks again...
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SqlServer no dupes 25 35
TSQL - How to declare table name 26 30
convert null in sql server 12 34
syntax sql error 2 13
Nowadays, some of developer are too much worried about data. Who is using data, who is updating it etc. etc. Because, data is more costlier in term of money and information. So security of data is focusing concern in days. Lets' understand the Au…
Introduction SQL Server Integration Services can read XML files, that’s known by every BI developer.  (If you didn’t, don’t worry, I’m aiming this article at newcomers as well.) But how far can you go?  When does the XML Source component become …
Via a live example, show how to extract information from SQL Server on Database, Connection and Server properties
Via a live example, show how to extract insert data into a SQL Server database table using the Import/Export option and Bulk Insert.

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question