?
Solved

Lost permissions MS Sql server

Posted on 2014-02-13
4
Medium Priority
?
464 Views
Last Modified: 2014-05-23
Hi all!

Something strange has happened, suddenly only domain users an sa-account have connect-only access to the SQL-server. Domain admins are gone, and I am unable to do anything since all users only have connect-access. I haven't done anything to the server at all, it just suddenly was a problem backing up the database because of the lack of permissions.

Thanks for any help

Kjetil
0
Comment
Question by:Sekodata
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 20

Accepted Solution

by:
Marten Rune earned 1000 total points
ID: 39858767
What does the errorlog say?
http://support.microsoft.com/kb/966659

Do you backup through a sql agent job, if so what account is the SQL agent running under?

Does the windows applicationlog reveal anything of interest

Come back with answers to these questions and well figure this out.

Regards Marten
0
 

Author Comment

by:Sekodata
ID: 39858793
Hi, the event log:
Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: (ip-address)]

the sql log:
2014-02-14 13:44:57.11 Logon       Error: 18456, Severity: 14, State: 7.
2014-02-14 13:44:57.11 Logon       Login failed for user 'sa'. Reason: An error occurred while evaluating the password. [CLIENT: (ip-address)]
2014-02-14 13:44:58.25 Backup      Error: 3041, Severity: 16, State: 1.
2014-02-14 13:44:58.25 Backup      BACKUP failed to complete the command BACKUP DATABASE (databasename)
0
 
LVL 20

Expert Comment

by:Marten Rune
ID: 39859027
State 7: The login is disabled *and* the password is incorrect.
http://sqlblog.com/blogs/aaron_bertrand/archive/2011/01/14/sql-server-v-next-denali-additional-states-for-error-18456.aspx

I'm guessing the authentication mode is not mixed mode, since the SA account is disabled.
Otherwise it can't be disabled if I'm not incorrect.

If you hav a account use it, otherwise restart SQL using the -m
(Start the instance of SQL Server in single-user mode by using either the -m options)
http://technet.microsoft.com/en-us/library/dd207004(v=sql.105).aspx
Now local admins can logon.

Your main problem is probably that there is no known fullbackups, so log backups cannot be performed, se:
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/13e7a89e-bc75-492c-98c6-24e4158f76c3/error-3041-severity-16-state-1-check-the-backup-application-log?forum=sqltools

So fix the accounts (starting up with -m switch), correct the accounts, run a native fullbackup and logbackup to see that they work (don't throw these). Run your backups using your 3'rd party tool. verify the backups on a different server or something similar. Now you can throw the native backups you did earliare.

Regards Marten
0
 

Author Comment

by:Sekodata
ID: 40087697
I've requested that this question be deleted for the following reason:

no fix
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have written a PowerShell script to "walk" the security structure of each SQL instance to find:         Each Login (Windows or SQL)             * Its Server Roles             * Every database to which the login is mapped             * The associated "Database User" for this …
Ever needed a SQL 2008 Database replicated/mirrored/log shipped on another server but you can't take the downtime inflicted by initial snapshot or disconnect while T-logs are restored or mirror applied? You can use SQL Server Initialize from Backup…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question