March 19, 2011 at 6:01 am
Hello gents
When I try to start a MSSQLSERVER service under domain user account '[domain]\srvcSQL2005-[servername]', I get the following error message:
FCB::Open: Operating system error 5(Access is denied.) occurred while creating or opening file 'X:\SQL\systemdb\master.mdf'. Diagnose and correct the operating system error, and retry the operation.
FCB::Open failed: Could not open file X:\SQL\systemdb\master.mdf for file number 1. OS error: 5(Access is denied.).
Note: the master files (both log and data) are orderly placed at X:\SQL\systemdb folder.
This domain user account '[domain]\srvcSQL2005-[servername]' is a member of local user group 'SQLServer2005MSSQLUser$[servername]$MSSQLSERVER' and this group has 'full control' privilege over 'X:\SQL' folder. Therefore ideally, this service account has enough rights to operate a sql server service according to many microsoft technical resources. So why I can't start sql server service under this setting then?
To solve the issue, I add this domain user account '[domain]\srvcSQL2005-[servername]' to local admin group and the sql server service can be started normally. But isn't this an overkill for service account?
Please advise me and thanks in advance!
Bazinga!
March 19, 2011 at 6:53 am
How did you change the sql server service account? Did you use configuration manager or did you use the services.msc pluggin?
Gethyn Elliswww.gethynellis.com
March 19, 2011 at 7:00 am
Always the configuration manager, any other thoughts?
Bazinga!
March 19, 2011 at 7:08 am
You said that the account has permissions on X:\SQL folder, does it definately have permissions on the systemmdb sub folder too?
Gethyn Elliswww.gethynellis.com
March 19, 2011 at 7:21 am
Double checked, all sub-dirs inherited the full control privilege.
Bazinga!
March 20, 2011 at 2:25 am
Also check the properties of the Db's file and give full control to the domain user on the database files.
NEVER NEVER EVER GIVE UP;-)
March 21, 2011 at 6:06 am
scorpianprince (3/20/2011)
Also check the properties of the Db's file and give full control to the domain user on the database files.
Thanks for the heads-up,mate.
Now the problem is sovled and the solution is that I give user groupd 'SQLServer2005MSSQLUser$[servername]$MSSQLSERVER' full control rights on all the system databases' data and log files which are located at X:\SQL\systemdb folder.
The funny thing is that the inheritted permission of full control on this folder is not inherrited to all the files included. To put up more info here, this S: drive and and all the subfolders are mapped drive/folders from SAN storage.
Does anyone else ever encounter inherrited permission issues with mapped folders from SAN?
Bazinga!
March 21, 2011 at 6:59 am
More input regarding the same issue, if I try to create a test database on this X:\SQL\ folder, I get error message:
"CREATE FILE encountered operating system error 5(Access is denied.) while
attempting to open or create the physical file 'X:\SQL\test.mdf'"
So bascially even if the service account having full control over X: drive or X:\SQL\ folder does not guarantee any success in creating new database files.
Any other thoughts, gents?
Bazinga!
Viewing 8 posts - 1 through 7 (of 7 total)
You must be logged in to reply to this topic. Login to reply