SQL Services Password
it_consultant
Member Posts: 1,903
in Off-Topic
Hello,
Has anyone run into a problem where, after you change the services password (domain account) for SQL services, it seems that Windows "forgets" what the password is? Lets say I set the password and run the service, sometime later I might restart the service or reboot the server. When I go to run the service it says "cannot start due to logon failure", I put the password in, hit start, it works again.
I have tested this on my SQL cluster, it seems to "forget" after 2 days. I am at a loss, I go into the local GPO manager and for some reason, the users that are granted "log on as a service" right are greyed out, and I cannot add or remove users - although the SQL domain account IS in there.
Has anyone run into a problem where, after you change the services password (domain account) for SQL services, it seems that Windows "forgets" what the password is? Lets say I set the password and run the service, sometime later I might restart the service or reboot the server. When I go to run the service it says "cannot start due to logon failure", I put the password in, hit start, it works again.
I have tested this on my SQL cluster, it seems to "forget" after 2 days. I am at a loss, I go into the local GPO manager and for some reason, the users that are granted "log on as a service" right are greyed out, and I cannot add or remove users - although the SQL domain account IS in there.
Comments
-
TechJunky
Member Posts: 881
What account are you using to start the service?
Local System, Network, specific account etc?
To me, this sounds like the problem.
Create a local account and specify the password and stop/start the service and see what happens. -
ptilsen
Member Posts: 2,835 ■■■■■■■■■■
The problem is most likely that a domain-level group policy is set to only allow certain accounts to be given the Log on as a Service right.
Review the Resultant Set of Policy and you will be able to track down the policy. -
it_consultant
Member Posts: 1,903
The problem is most likely that a domain-level group policy is set to only allow certain accounts to be given the Log on as a Service right.
Review the Resultant Set of Policy and you will be able to track down the policy.
This is probably it, I haven't looked into it yet. Thanks!
*UPDATE* Another admin HAD set this GPO to enable the service logon of a little widget software that we run which tracks people's internet habits and reports them to a log server. I am going to have to keep this one in my toolbelt.