May 19, 2014 at 11:06 am
I have a 2 node cluster environment on SQL 2008 R2 Enterprise Ed SP2.
I defined a proxy account so that a few jobs could execute cmdexec. It used to work and then now it doesn't. We are not sure what changed to cause the failure.
I receive this message when the job is run:
Executed as user: ent\corp-svc-dbproxy. The process could not be created for step 1 of job 0x35648B9B64CA174BB3FB7AFE2E4D342B (reason: A required privilege is not held by the client). The step failed.
If I change the job to the SQL Server Agent it runs successfully but when I change it to be run by the proxy account it fails.
We defined another proxy account to see if there is something wrong with the previous proxy account and that account fails with the same error.
I don't think it's proxy account. It seems that SQL Agent impersonating the DB Proxy account is the problem.
We looked at this link:
http://support.microsoft.com/kb/911305 and http://technet.microsoft.com/en-us/library/ms143504(v=sql.105).aspx.
We had a mandatory password change across the board for all service accounts about a YR ago. We are not sure what we used to change the passwords. This is a test server so we don't always run the job so we are not entirely sure when the problem occurred.
Thank you for all your assistance.
Patti Johnson
May 20, 2014 at 2:40 am
When you changed the passwords in Windows, did you refresh the passwords held within SQL Server? If not then SQL Server will still try to log on to the proxy account using the old password.
Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.
When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara
May 20, 2014 at 6:41 am
What do you mean by refresh the password? Do you mean reboot the server?
May 20, 2014 at 6:47 am
See http://sqlserverfinebuild.codeplex.com/wikipage?title=Change%20Proxy%20Account%20password.
Also see http://sqlserverfinebuild.codeplex.com/wikipage?title=SQL%20Server%20Proxy%20Accounts for some general advice about proxy accounts.
Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.
When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara
May 20, 2014 at 6:53 am
We didn't change the proxy account password. We changed the service account passwords.
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply