Post reply

''SQLAgentCmdExec'': Logon failure Please help - I ran out of ideas!

  • February 4, 2005 at 12:51 am

    #110094

    I work with SQL Server 2000 and was made change the domain in which sql service accounts had worked perfectly for almost 2 years - all scheduled job had run without any problems. Now I have new domain accounts for the startup account and the SQL Agent service. I also have a new proxy account for jobs owned by non-sysadmin role users. The proxy account was of course reset from EM.

    My problem is that Jobs are executed only for one day after the reset of the proxy account. Every morning I have to reset the proxy account and everything works perfectly till the next morning. The jobs fail with the message: A problem occurred while attempting to logon as the Windows user 'SQLAgentCmdExec': Logon failure: the user has not been granted the requested logon type at this computer.  The step failed.     

    I thought that the proxy account permission to log on as a batch job was denied by the domain security policy overwriting my local settings and I was right. Now all service accounts have the permission to log on as a batch job from the domain security policy but jobs still fail on the next day and I have to reset the proxy account. More to that I noticed that:

    1. If I remove the local permission for the proxy account - to log on as a batch job - jobs fail with the same error message

    2. Then (after removing) if I add this permission jobs still fail untill I reset the proxy account

    3. I also have the domain account SQLAgentCmdExec and the more tests I make the less I understand if this account is necessary or not on SQL Server 2000. If I remove the local permission for the SQLAgentCmdExec account -to log on as a batch job - jobs fail. Then I reset the proxy account (different account) and everything is fine. 

    If someone could help me or at least explain the role of SQLAgentCmdExec on SQL Server 2000 which is supposed to be replaced by the proxy account.

  • February 7, 2005 at 8:00 am

    This was removed by the editor as SPAM

  • February 8, 2005 at 9:00 am

    #541149

    When you changed to the new service accounts did you use EM to make the change or did you change the account in the services app within administrative tools? If you didn't use EM the accounts may not have the correct rights. 

  • April 8, 2008 at 9:01 pm

    #800124

    Is there more than one instance on the box?

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply