June 11, 2009 at 1:08 pm
Hello All
We have set up a new QA VM Windows Server 2008 instance and I have installed two new named SQL Server instances with mixed mode authentication and brought them up to 2005 SP3 CU2 (Enterprise Edition 64 bit).
First thing I noticed is that my Domain Administrator account can not access SQL Server via Windows Authentication.
Error Number 18456 Serverity 14 State 1
'[DomainName]\Domain Admins' is part of of the Administrators Group under the OS's 'Local Users and Groups'
In fact, I took it a step further and added the domain user specifically to the Administrators group.
BUILTIN\Administrators under SQL Server logins is NOT disabled and it looks correct under properties.
We have numerous other servers with identical setup and have not had problems with these servers. The only difference is that this is a Virtual Machine running Windows Server 2008.
I am positive that this user is a domain administrator.
This domain administrator is used on other servers for the same purpose.
I'm sure I am overlooking something
I have spent most of my day on this and I am spinning my wheels now...any help would be appreciated.
thank you in advance
June 11, 2009 at 1:52 pm
The SQL Server error log will have more relevant error that related to your problem, can you please upload the errors in the sql server log,
Oded
June 11, 2009 at 2:02 pm
I assume the domain is correct, and that you can log on locally to the VM.
Can you log on with NT Auth to (local)?
June 11, 2009 at 2:14 pm
Here is an example....
2009-06-11 16:09:04.08 Logon Error: 18456, Severity: 14, State: 11.
2009-06-11 16:09:04.08 Logon Login failed for user 'xxxxxxx\xxxxxxx'.
[CLIENT: local machine]
June 11, 2009 at 2:28 pm
Steve Jones - Editor (6/11/2009)
I assume the domain is correct, and that you can log on locally to the VM.
YES
Can you log on with NT Auth to (local)?
Never had to test this...how do I test
June 11, 2009 at 2:30 pm
June 12, 2009 at 7:39 am
I have taken the cheap way out.
I have added the domain admin user directly to SQL Server as a 'Windows Athentication' login with sysadmin priveledges. This is what I though should have happended by default under the 'BUILTIN\Administrators' account.
Not sure but my problem may have had something to do with the fact that we disable our Windows 2008 local 'Administrator' user.
We grant our domain admins administrator priveledges via the Administrators Groups.
I was testing the Domain Admins on my other servers and I found that I was not accurate with my original statement. Most domain admins will not work as I expected but for some strange reason the default domain administrator ( 'domainname\Administrator' ) works.
I have my solution but if anyone can explain why user defined domain admins do not work in the same fasion as the default domain admin....that would be great....I hate not knowing:crazy:
Does it have something to do with my local administor account being disabled?
thanks for the replies
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply