SQL Server Forums
Profile | Register | Active Topics | Members | Search | Forum FAQ
 
Register Now and get your question answered!
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 SQL Server 2008 Forums
 SQL Server Administration (2008)
 Login failed for user 'domain\computer$'
 New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

maximx86
Starting Member

4 Posts

Posted - 06/21/2013 :  07:03:13  Show Profile  Reply with Quote
Hi,

All my SQL jobs are failing and generate and error:


Error = [Microsoft][SQL Server Native Client 10.0][SQL Server]Login failed for user 'ABBEYEXPATS\AES16$'.


AES16 is the SQL machine.

I can see two other errors as well:

Date 21/06/2013 03:00:01
Log SQL Server (Archive #2 - 21/06/2013 10:13:00)
Source Logon
Message
Login failed for user 'ABBEYEXPATS\AES16$'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: 192.168.1.166]

Date 21/06/2013 03:00:01
Log SQL Server (Archive #2 - 21/06/2013 10:13:00)
Source Logon
Message
Error: 18456, Severity: 14, State: 11.

I checked the MSDN website and found that State: 11 means:

Login is valid, but server access failed. One possible cause of this error is when the Windows user has access to SQL Server as a member of the local administrators group, but Windows is not providing administrator credentials. To connect, start the connecting program using the Run as administrator option, and then add the Windows user to SQL Server as a specific login.

How can I grant access to the computer (AES16) in SQL?

Regards

Max

bandi
Flowing Fount of Yak Knowledge

India
2224 Posts

Posted - 06/21/2013 :  08:15:52  Show Profile  Reply with Quote
Check this one too
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/d2a02ec4-c036-4e8f-95d9-fbd3a4fe58de/error-18456-severity-14-state-11
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/40d83498-f52f-41e9-8d11-f2ea43413479/how-to-fix-login-failed-for-user-microsoft-sql-server-error-18456in-windows-2008
--
Chandu

Edited by - bandi on 06/21/2013 08:26:18
Go to Top of Page

ahmeds08
Aged Yak Warrior

India
693 Posts

Posted - 07/03/2013 :  06:27:40  Show Profile  Send ahmeds08 a Yahoo! Message  Reply with Quote
Its always better to run the jobs through sa account.

mohammad.javeed.ahmed@gmail.com
Go to Top of Page

visakh16
Very Important crosS Applying yaK Herder

India
52325 Posts

Posted - 07/03/2013 :  07:11:34  Show Profile  Reply with Quote
quote:
Originally posted by ahmeds08

Its always better to run the jobs through sa account.

mohammad.javeed.ahmed@gmail.com


Nope. Not recommended.
Better to create proxy accounts giving it only sufficient permissions (like access to folders etc required by job steps) and use it for running jobs.
Using sa account means it will have "unrestricted" permissions which can cause security issues especially when code it uses have some security vulnerabilities.
The rule of thumb should be DENY all first and then GRANT only the required permissions.
Please keep in mind there can be code inside jobs which may execute outside sql server engine control (like batch files, xp_cmdshell etc)

Thats the reason why sa account is disabled by default in the first place as its one of first places which hackers tries to exploit for attacks.

------------------------------------------------------------------------------------------------------
SQL Server MVP
http://visakhm.blogspot.com/
https://www.facebook.com/VmBlogs
Go to Top of Page

ahmeds08
Aged Yak Warrior

India
693 Posts

Posted - 07/03/2013 :  07:31:50  Show Profile  Send ahmeds08 a Yahoo! Message  Reply with Quote
Visakh,Thanks for your explanation.
What i knew was if the domain account has access problems with the AD then the jobs might fail.

mohammad.javeed.ahmed@gmail.com
Go to Top of Page

visakh16
Very Important crosS Applying yaK Herder

India
52325 Posts

Posted - 07/03/2013 :  07:42:32  Show Profile  Reply with Quote
quote:
Originally posted by ahmeds08

Visakh,Thanks for your explanation.
What i knew was if the domain account has access problems with the AD then the jobs might fail.

mohammad.javeed.ahmed@gmail.com


How can domain account have access problems with AD?
As I understand, domain accounts will be created and maintained in AD itself for windows based network so cant think of a possibility for that. Can you shed some light?

------------------------------------------------------------------------------------------------------
SQL Server MVP
http://visakhm.blogspot.com/
https://www.facebook.com/VmBlogs
Go to Top of Page

ahmeds08
Aged Yak Warrior

India
693 Posts

Posted - 07/03/2013 :  08:17:41  Show Profile  Send ahmeds08 a Yahoo! Message  Reply with Quote
Sometimes due to ip conflicts a domain account could not log in to domain network,this would be one case.
other case would be if a domain account has been disabled by admin for some reason?.

mohammad.javeed.ahmed@gmail.com
Go to Top of Page

visakh16
Very Important crosS Applying yaK Herder

India
52325 Posts

Posted - 07/03/2013 :  08:32:46  Show Profile  Reply with Quote
quote:
Originally posted by ahmeds08

Sometimes due to ip conflicts a domain account could not log in to domain network,this would be one case.
other case would be if a domain account has been disabled by admin for some reason?.

mohammad.javeed.ahmed@gmail.com


both of these are problems outside of sqlserver that need to be addressed by concerned persons (system admins) at the network level. Configuring sql server to use sa account for all jobs is not a remedy for any of them

------------------------------------------------------------------------------------------------------
SQL Server MVP
http://visakhm.blogspot.com/
https://www.facebook.com/VmBlogs
Go to Top of Page

ahmeds08
Aged Yak Warrior

India
693 Posts

Posted - 07/03/2013 :  08:37:59  Show Profile  Send ahmeds08 a Yahoo! Message  Reply with Quote
Got it...Thanks

mohammad.javeed.ahmed@gmail.com
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
SQL Server Forums © 2000-2009 SQLTeam Publishing, LLC Go To Top Of Page
This page was generated in 0.08 seconds. Powered By: Snitz Forums 2000