?
Solved

High number of EventID 18456 from MSSQL$SQLSERVER on SBS 2008

Posted on 2016-08-08
5
Medium Priority
?
73 Views
Last Modified: 2016-08-08
Hi Experts,

This SBS 2008 has a high number of EventID 18456 from MSSQL$SQLSERVER (about 3 every minute)

Login failed for user 'NT AUTHORITY\SYSTEM'. Reason: Failed to open the explicitly specified database. [CLIENT: <local machine>]

What could be the root cause of these errors?

Note:
1. This server is SQL 2008 R2 & SQL Server 2005 (Express?)
2. SQLSERVER has a CRM database on it which is managed by a 3d party
0
Comment
Question by:Alexandre Michel
  • 3
  • 2
5 Comments
 
LVL 53

Expert Comment

by:Vitor Montalvão
ID: 41747273
When the error started to appear?
What changed or was installed on that time?
0
 
LVL 4

Author Comment

by:Alexandre Michel
ID: 41747281
Vitor

The message appears every 20 seconds
I am not sure when it started, as event logs are overwritten after 4-5 days dues to the high number of entries
It could have been there for weeks or months... I just noticed today as I am spending a bit of time on this server
0
 
LVL 53

Accepted Solution

by:
Vitor Montalvão earned 1500 total points
ID: 41747291
Some application or service is trying to connect to SQL Server using 'NT AUTHORITY\SYSTEM' account and that user doesn't have access to the requested database and that's why you're having those error log entries.

Try to find the application to solve it out.

NOTE: Many people install SQL Server with Local System account and that's good for hackers to try to break into SQL Server databases. Hopefully is not your case.
0
 
LVL 4

Author Closing Comment

by:Alexandre Michel
ID: 41748259
Thanks for our suggestion Vitor. I had to do quite a bit of digging to find which application was generating these log in requests, so marked as partial solution.
0
 
LVL 53

Expert Comment

by:Vitor Montalvão
ID: 41748294
That's the only way to find the application.
We from this side can't help you much with this task because we don't have access to your system.
Cheers
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This month, Experts Exchange sat down with resident SQL expert, Jim Horn, for an in-depth look into the makings of a successful career in SQL.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

593 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question