We help IT Professionals succeed at work.

How to resolve "Token-based server access validation failed with an infrastructure" error?

PBIT
PBIT asked
on
12 Comments
1 solution
Medium Priority
4,459 Views
Last Modified: 2013-12-01
Hello,

On a regular basis in the Windows Application and SQL Server logs, I see these errors:

SQL Server Log:

Login failed for user 'domain\acct'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: <local machine>]

Windows Log:

SQL database login for 'SharePoint_Config' on instance 'SERVER' failed. Additional error information from SQL Server is included below. Login failed for user 'domain\acct'.

I don't know what application is needing access, and I don't think what ever it is needs access.

Is there a way to tell what application is trying to access SQL Server and the IP address?

Thanks.
Comment
Watch Question

View Solution Only

David ToddSenior Database Administrator
CERTIFIED EXPERT

Commented:
Hi,

If it is the same sort of errors I'm working through, it appears that the SQL Server service account doesn't have enough rights to read the Active Directory for the Sharepoint Account.

it is possible that SQL is NOT running under a Domain Account, which is best practice.

Fix - create domain account.

...

HTH
  David
PBIT

Author

Commented:
I am working with Symantec now on this problem. I will post a solution, once I have it resolved.
David ToddSenior Database Administrator
CERTIFIED EXPERT

Commented:
Hi PBIT,

Why Symantec?

Regards
  David
PBIT

Author

Commented:
When I view the propertieis of a job in Backup Exec for a server, that error and 2 others occur in the Application Event Log on the remote server.  We are just backing up the folders on the remote server, but Backup Exec is trying to access the SharePoint config database.
David ToddSenior Database Administrator
CERTIFIED EXPERT

Commented:
Hi,

Generally backup software should leavel the mdf and ldf files alone, unless you have the SQL Agent and are using that.

Now that you mention Backup Exec it makes sense that you are working with Symantec.

Regards
  David
PBIT

Author

Commented:
I wondering if I should close question. I can leave it open, but the problem is with Backup Exce.
David ToddSenior Database Administrator
CERTIFIED EXPERT

Commented:
Hi,

Is there a Backup Exec topic area that the moderators could help you add?

Regards
  David
Commented:
Symantec support says that the errors being generated are false positives and can be ignored.

However, if you want to try to stop the errors from being generated in the application event log, try this in this link:

http://www.symantec.com/business/support/index?page=content&pmv=print&impressions=&viewlocale=&id=TECH154074
PBIT

Author

Commented:
I called Symantec and got some answers from them. Please close question. Thank you.
sacshimpi

Commented:
Hi PBIT,

1. Make sure the service account of the SQL instance being used is set to Local system account.

2. Logon as a Domain administrator which is also a 'sysadmin' (By default, the local administrators group is a member of the sysadmin server role on the SQL Server database.).

3. Restart the SQL Server service.

4. Retry the job.