• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 81
  • Last Modified:

High number of EventID 18456 from MSSQL$SQLSERVER on SBS 2008

Hi Experts,

This SBS 2008 has a high number of EventID 18456 from MSSQL$SQLSERVER (about 3 every minute)

Login failed for user 'NT AUTHORITY\SYSTEM'. Reason: Failed to open the explicitly specified database. [CLIENT: <local machine>]

What could be the root cause of these errors?

Note:
1. This server is SQL 2008 R2 & SQL Server 2005 (Express?)
2. SQLSERVER has a CRM database on it which is managed by a 3d party
0
Alexandre Michel
Asked:
Alexandre Michel
  • 3
  • 2
1 Solution
 
Vitor MontalvãoMSSQL Senior EngineerCommented:
When the error started to appear?
What changed or was installed on that time?
0
 
Alexandre MichelManager; IT ConsultantAuthor Commented:
Vitor

The message appears every 20 seconds
I am not sure when it started, as event logs are overwritten after 4-5 days dues to the high number of entries
It could have been there for weeks or months... I just noticed today as I am spending a bit of time on this server
0
 
Vitor MontalvãoMSSQL Senior EngineerCommented:
Some application or service is trying to connect to SQL Server using 'NT AUTHORITY\SYSTEM' account and that user doesn't have access to the requested database and that's why you're having those error log entries.

Try to find the application to solve it out.

NOTE: Many people install SQL Server with Local System account and that's good for hackers to try to break into SQL Server databases. Hopefully is not your case.
0
 
Alexandre MichelManager; IT ConsultantAuthor Commented:
Thanks for our suggestion Vitor. I had to do quite a bit of digging to find which application was generating these log in requests, so marked as partial solution.
0
 
Vitor MontalvãoMSSQL Senior EngineerCommented:
That's the only way to find the application.
We from this side can't help you much with this task because we don't have access to your system.
Cheers
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now