December 4, 2008 at 11:53 am
I have two passive and one standby.
Today the cluster rolled so i have investigated the logs around the time.
I see invalid login for domain\SQLX1$ right around the time being logged for 15 minutes
On the cluster i have the physical node SQLX1 and SQLX2 and SQLX3
The sql is started with domain\SQL_XName
So im trying to figure out where this login domain\SQLX1$ is coming from.
I don't see any services starting with this.
December 4, 2008 at 1:50 pm
Occasionally I see SQL Server using "Local System" credentials, to show up as DOMAIN\ServerName$
(the $ sign is a hint)
Check if any service is not run under a Domain\User account (which will be strange considering you're using Cluster)
December 4, 2008 at 1:55 pm
So it be something run on the actual server ? yes i can't see any services starting with this .
Kind of strange..
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply