Solved

service account is not sql login, but can backup.

Posted on 2011-03-16
21
982 Views
Last Modified: 2013-11-10

within a ssis package, there is a backup task. then this package is scheduled and run by the service account. even though the service account does not have a login, how is it successfully able to do the backup?

thanks
0
Comment
Question by:anushahanna
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 12
  • 9
21 Comments
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35149661
Is that package scheduled to run in windows scheduled tasks or in sql server job?
What service account you mean ?
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35150298
sql server job. both sql and agent service account is the same.
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150413
Who is the owner of a job? It is executed in owners context, in the filesystem SQL server service account permissions are used.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 6

Author Comment

by:anushahanna
ID: 35150459
owner is srbsv\jimwe
but this package is uploaded to integration server and then it is part of a step in the sql job. the only option in that step is that the service account will run it.

can you explain what is meant by "in the filesystem SQL server service account permissions are used."
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150584
I mean when you are creating backup in the filesystem SQL Server needs to create a file, and it's permissions are used for that.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35150682
OK- but who is running the package step in the job? service account, right?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35150741
It depend how you are executing package, is this step of SSIS type, CMDExec type or sql with xp_cmdshell query?
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35151139
SSIS type
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35151245
You can execute SSIS step type by using either SQL Agent account or SSIS proxy account, if you have created one:

 ssis job
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35153320
thanks for showing the option other than service account.

but in my case, i am using service account only. he is not a login but how is the backup happening fine?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35154154
Can you verifz whether SQL Server Agent account has no access? (put there it's service account):
 
EXEC sys.xp_logininfo
@acctname = 'Domain\User'

Open in new window

0
 
LVL 6

Author Comment

by:anushahanna
ID: 35159631
exactly- the above query brings back blank.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35185906
Daniel, what do you infer from the above (service account is not a login by can backup through ssis package)?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35187032
We've determined so far that SQL Agent and SQL Server service accounts is the same account. You're saying that Agent account isn't login in SQL Server, are you 100% sure of it? By default SQL Server and Agent service accounts are added as logins in SQL Server RDBMS with sysadmin server roles. You can verify which service has which account in Sql Server Configuration Manager (start->run->(type) sqlservermanager10.msc).
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189433
yes, i confirmed the service accounts and that they are the same for sql and agent. now, you gave me a clue:

EXEC master..xp_logininfo 'NT SERVICE\MSSQL$POST04','members'
EXEC master..xp_logininfo 'NT SERVICE\ClusSvc','members'
EXEC master..xp_logininfo 'NT AUTHORITY\SYSTEM','members'
EXEC master..xp_logininfo 'NT SERVICE\SQLAgent$POST04','members'

are the ones i am not sure about in the logins- could one of these have the service account inside of it.

all of them return the error "Could not obtain information about Windows NT group/user, error code 0x8ac."
0
 
LVL 14

Accepted Solution

by:
Daniel_PL earned 500 total points
ID: 35189540
Look on priviledges of those accounts:

EXEC sys.xp_logininfo
@acctname = 'NT SERVICE\MSSQL$POST04'
...
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189600
i get

account name      type      privilege      mapped login name      permission path
NT SERVICE\MSSQL$POST04      group      admin      NT SERVICE\MSSQL$POST04      NULL

account name      type      privilege      mapped login name      permission path
NT SERVICE\SQLAgent$POST04      group      admin      NT SERVICE\SQLAgent$POST04      NULL

what is the admin here mean?
0
 
LVL 14

Expert Comment

by:Daniel_PL
ID: 35189638
Admin is the sysadmin :)
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189671
ah! so that means that both service account (in this case it is the same) are sysadmins and that explains it..
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189674

thanks a lot Daniel. I see you are active in EE for past 2 weeks with lot of insight and experience.. hope you enjoy the experience...
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35189696
Daniel, could you please give me your feedback on

http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/Q_26826520.html 

if the question interests you..

thanks again...
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to reset the password of the sa account on a Microsoft SQL Server.  The steps in this article work in SQL 2005, 2008, 2008 R2, 2012, 2014 and 2016.
Recently we ran in to an issue while running some SQL jobs where we were trying to process the cubes.  We got an error saying failure stating 'NT SERVICE\SQLSERVERAGENT does not have access to Analysis Services. So this is a way to automate that wit…
Via a live example combined with referencing Books Online, show some of the information that can be extracted from the Catalog Views in SQL Server.
Viewers will learn how to use the SELECT statement in SQL to return specific rows and columns, with various degrees of sorting and limits in place.

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question