Failed to create LOGIN from a domain account on SQL Server 2012

Hello,
My environment is like,
A Domian Controller (with the domain name: CONTOSO) hosted by a Windows Server 2008 R2. --- Server 1
A SQL Server 2012 x64 runs on another Windows Server 2008 R2 (this Server has been added into the CONTOSO domain). --- Server 2
I am trying to create a SQL login on Server 2 with the statement shown below:
CREATE LOGIN "CONTOSO\domain_group_b" FROM WINDOWS;
while, an error occurred,
Msg 15401, Level 16, State 1, Line 1
Windows NT user or group 'CONTOSO\domain_group_b' not found. Check the name again.
I've made sure that the domain group account "domain_group_b" has been created on Server 1.
Is anything else needed to be done?

Pretty pretty sorry for my bad explanation in English.
Yes, the Server 2 (the actual name of this server is "SQL-A", the Server 1's name is "DC") has been a member of CONTOSO.
I typo the domain name CONTOSO as CONTSO, but I keep using CONTSO everywhere.
These two servers are hosted by Hyper-V.
I could login on server2 by the domain user "domain_user_b".
It seems that neither the domain group, "domain_group_b" nor the domain user, "domain_user_b" cannot be associated when creating a SQL login.
SQL-A captures:

Similar Messages

Question : Service Accounts for SQL Server 2012

Hello,
I am planning to create AD accounts for SQL Server 2012 services that will be installed on Windows 2012 server.
I was reading the following
Configure Windows Service Accounts and Permissions
and
Windows Privileges and Rights
Is there a recommendation / document that would list that assocation of SQL Server Services with Actvie Directory service accounts / privileges required for installation and starting the services.
Isn't it recommended to create separate account for every service and they should not be local accounts ?
Hope to hear soon as to what industry standards are being followed for production systems ?
Thank you very much in advance.
Regards
Nikunj

From MSDN:
Each service in SQL Server represents a process or a set of processes to manage authentication of SQL Server operations with Windows. Each service can be configured to use its own service account. This facility is exposed
at installation. SQL Server provides a special tool, SQL Server Configuration Manager, to manage the services configuration.
When choosing service accounts, consider the principle of least privilege. The service account should have exactly the privileges that it needs to do its job and no more privileges. You also need to consider account isolation; the service accounts should
not only be different from one another, they should not be used by any other service on the same server. Do not grant additional permissions to the SQL Server service account or the service groups.
From Glen Berry's Blog:
You should request that a dedicated domain user account be created for use by the SQL Server service. This should just be a regular, domain account with no special rights on the domain. You do not need or want this account to be a local admin on the machine
where SQL Server will be installed. The SQL Server setup program will grant the necessary rights on the machine to that account during installation.
You will also want a separate, dedicated domain user account for the SQL Server Agent service. If you are going to be installing and using other SQL Server related services such as SQL Server Integration Services (SSIS), SQL Server Reporting Services (SSRS),
or SQL Server Analysis Services (SSAS), you will want dedicated domain accounts for each service. The reason you want separate accounts for each service is because they require different rights on the local machine, and having separate accounts is both more
secure and more resilient, since a problem with one account won’t affect all of the SQL Server Services.
Depending on your organization, getting these domain accounts created could take anywhere from minutes to weeks to complete, so make sure to allow time for this. For each one of these accounts, you will need their logon credentials for the SQL Server setup
program. You are going to want to make sure that the accounts don’t have a temporary password that must be changed during the next login. If they are set up that way, make sure to change them to use a strong password, and record this information in a secure
location.
Please Mark This As Answer if it solved your issue
Please Mark This As Helpful if it helps to solve your issue
Thanks,
Shashikant

Why would you use a managed service account rather than a virtual account in SQL Server 2012?

In SQL Server 2012, service accounts are created as
virtual accounts (VAs), as described
here, as opposed to
managed service accounts (MSAs).
The important differences I can see for these, based on the descriptions:
MSAs are domain accounts, VAs are local accounts
MSAs use automagic password management handled by AD, VAs have no passwords
in a Kerberos context, MSAs register SPNs automatically, VAs do not
Are there any other differences? If Kerberos is not in use, why would a DBA ever prefer an MSA?
UPDATE:
Another user has noted a
possible contradiction in the MS docs concerning VAs:
The virtual account is auto-managed, and the virtual account can access the network
in a domain environment.
versus
Virtual accounts cannot be authenticated to a remote location. All virtual accounts
use the permission of machine account. Provision the machine account in the format
<domain_name>\<computer_name>$.
What is the "machine account"? How/when/why does it get "provisioned"? What is the difference between "accessing the network in a domain environment" and "authenticating to a remote location [in a domain environment]"?

Hi,
“Virtual accounts cannot be authenticated to a remote location. All virtual accounts use the permission of machine account. Provision the machine account in the format <domain_name>\<computer_name>$.”
“The virtual account is auto-managed, and the virtual account can access the network in a domain environment. If the default value is used for the service accounts during SQL Server setup on Windows Server 2008 R2 or Windows 7, a virtual account
using the instance name as the service name is used, in the format NT SERVICE\<SERVICENAME>”
Per the above description, they are two concepts and not conflict with each other.
As you understand, virtual account access network resources by using the credentials of the computer account. Generally, computer account will not be granted permission unless giving the computer account permission on the shared folder manually.
Thanks.
Tracy Cai
TechNet Community Support

Errors while Changing the Database to Mutli User Mode from Single user mode in SQL Server 2012

Hi,
Good Afternoon :). Need your help in resolving one of the issue with SQL Server 2012.
Today, we kept one of the database in the Single User mode and wanted to bring back to Multi User mode. But we are getting the below error. There are no user sessions connected to this database which are blocking each other. I see multiple
SYSTEM sessions are in blocked state.  The blocking is not cleared even affter restarting the SQL services.
Verified the SQL Server Errorlog and couldnt get much useful information to troubleshoot the issue.
pasted the information from the sys.sysprocesses as well for your kind reference.
Msg 1205, Level 13, State 68, Line 1
Transaction (Process ID 55) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.
Msg 5069, Level 16, State 1, Line 1
ALTER DATABASE statement failed.
spid
kpid
blocked
waittype
waittime
dbid
login_time
status
cmd
18
1004
36
0x0005
144
5
4/9/2014 13:13
background
TASK MANAGER
35
1796
36
0x0005
35
5
4/9/2014 13:34
background
TASK MANAGER
36
2464
37
0x0005
363
5
4/9/2014 13:34
background
TASK MANAGER
37
5100
36
0x0005
254
5
4/9/2014 13:04
background
TASK MANAGER

Clearly 36 and 37 are causing deadlock.
see
https://www.simple-talk.com/sql/database-administration/handling-deadlocks-in-sql-server/
http://www.mssqltips.com/sqlservertip/1036/finding-and-troubleshooting-sql-server-deadlocks/
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

How do you create a buffer of a geometry in SQL Server 2012?

Hello,
I am new to SQL Server 2012 and spatial data. I built a geometry object of coordinates from a polygon that I stored in a database. The code is below:
DECLARE @digb GEOMETRY;
SET @digb = GEOMETRY::STGeomFromText('POLYGON ((-79.927138 40.362654, -79.91883 40.364224, -79.915966 40.361067, -79.917897 40.359266, -79.927398 40.360142, -79.927138 40.362654))', 4269);
I am using SRID 4269 (Latitude/Longitude NAD83). I have no issues getting this geometry to load properly when the query is executed. (shown below)
My problem is that I am unable to create a valid buffer of 150 feet on this geometry. I have tried using these 3 statements below (I assumed BufferWithCurves() would be the one that would work); however, ALL of them returned to an invalid buffer of
the polygon (shown below):
- DECLARE @digbb GEOMETRY = @digb.STBuffer(2);
- DECLARE @digbb GEOMETRY = @digb.BufferWithCurves(2)
- DECLARE @digbb GEOMETRY = @digb.BufferWithTolerance(@BufferSize,250.0,1);
Does anyone have any idea of how creating this buffer of a geometry object (polygon mentioned above) in SQL Server 2012?
Thanks in advance for any help.
Nick

Hi Nick,
BTW, please do ask questions on the forum, that's what it's for. I only meant "if my explanation in that specific answer was unclear, let me know and I'll clarify". Feel free to start a new thread for each topic because that way, it's
might be easier for folks to search on.
Specific answers:
I haven't worked directly with the MapInfo loader but if you're working with SQL Server, I assume what they may be doing is looking for "geodesic SRIDs" that SQL Server supports (the ones listed in sys.spatial_reference_systems) and loading those
as geography, else geometry. That may be a good thing to do.
If you want to decide yourself, here's some (short) background.
Only SQL Server (I think PostGIS might have added it) has separate geography and geometry types. Everyone else always uses "geometry" and gives you (maybe) the ability to convert between SRIDs in the database. SQL Server doesn't have
this built-in; you'd need to use a library like PROJ4.
You can use geometry type to refer to geodesic SRIDs, but it doesn't have a way to "take the area using spatial instances in decimal degrees and come up with meters". So, if you only use it to display on a map, it will display correctly.
Or close enough. Same with intersects, intersection and the like. But anything like area, distance, or, in your case buffer using a specific number of meters, you need to use geography. You could have gotten somewhat similar-looking
results with geometry by making your input to STBuffer a sufficiently small fraction, but it would be a guess on your part, not a "150 feet" buffer.
You can't CAST/CONVERT between geometry and geography because they didn't want people to assume that these would do SRID conversion. However, there is a codeplex library "SQL Server Spatial Tools" (http://sqlspatialtools.codeplex.com/) that
has two methods: VacuousGeometryToGeography and vice-versa, that does the equivalent (but optimized) of taking one type, spitting it out in well-known text format, then using it to initialize the other type. Or you can do this in your own code.
In general, geography is for anything geodesic; geometry is for planar or projected coordinate systems (e.g state plane coordinate systems in US, that don't use Long/Lat). But geography is slightly slower in calculations (like intersects) because it's more
complex than simple Euclidian geometry. And folks in other platforms are used to using "geometry" and having the platform do the (sometimes fairly expensive) conversions on-the-fly. Or maybe you don't care about the area, distance, etc.
Even in the geography type, WKT specifies (Long Lat) not (Lat Long). This is because the OGC standard doesn't distinguish and calls things (X Y), and if you think about it, (X Y) is (Long Lat) not (Lat Long). The SQL Server geography-specific method MakePoint
has latitude first as a parameter. OGC or SQL/MM standard methods and property names start with "ST" in SQL Server (e.g. STIntersects); SQL Server-specific methods and properties do not (e.g. MakePoint, ReorientObject).
Finally, attempting to do spatial calculations with unlike SRIDs (e.g. intersects between SRID 4269 and 4326 instance) returns NULL.
One more post coming on this thread with some info/links.
Cheers, Bob

Ssis - import data from flat file to table (sql server 2012)

i have create a ssis for importing data from flat file to table in sql server 2012.
but i got the below error for some column in data flow task.
error: cannot processed because than one code page (950 and 1252)
anyone helps~

Hi,
The issue occurs because the source flat file uses ANSI/OEM – Tranditional Chinese Big5 encoding. When processing the source file, the flat file connection manager uses code page 950 for the columns. Because SQL Server uses code page to perform conversions
between non-Unicode data and Unicode data, the data in the code page 950 based input columns cannot be loaded to code page 1252 based destination columns. To resolve the issue, you need to load the data into a SQL Server destination table that includes Unicode
columns (nchar or nvarchar), and convert the input columns to Unicode columns via Data Conversion or the Advanced Editor for the Flat File Source at the same time.
Another option that may not be that practical is to create a new database based on the Chinese_Taiwan_Stroke_BIN collation, and load the data to non-Unicode columns directly.
Reference:
http://social.technet.microsoft.com/Forums/windows/en-US/f939e3ba-a47e-43b9-88c3-c94bdfb7da58/forum-faq-how-to-fix-the-error-the-column-xx-cannot-be-processed-because-more-than-one-code-page?forum=sqlintegrationservices
Regards,
Mike Yin
TechNet Community Support

Syntax error when creating a user-defined table type in SQL Server 2012

Why am I getting a syntax error when creating a user-defined table type in SQL Server 2014?
CREATE TYPE ReportsTableType AS TABLE
( reportId INT
, questionId INT
, questionOrder INT );
Results:
Msg 156, Level 15, State 1, Line 1
Incorrect syntax near the keyword 'AS'.

Hope these posts could help,
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/37a45a9a-ed8c-4655-be93-f6e6d5ef44be/getting-incorrect-syntax-while-creating-a-table-type-in-sql-server-2008-r2?forum=transactsql
Regards, Dineshkumar,
Please Mark as Answer if my post answers your question and
Vote as Helpful if it helps you

Package migration from SSIS 2008 R2 to SQL server 2012

hi guys:
My company has decided to use Sql server 2012 for the database service, Integration service as well as analysis service
The first question is which tool I should install to run packages ? in SQL Server 2008 R2, I've installed BIDS which is inside the disk.
Also do I need to install any visual studio tools? I was under the impression that the BIDS 2008 was using kinda shell visual studio.
Thanks
Hui
--Currently using Reporting Service 2000; Visual Studio .NET 2003; Visual Source Safe SSIS 2008 SSAS 2008, SVN --

Hi cat_ca,
To develop package in SQL Server 2012 Integration Services, we use the SQL Server Data Tools (SSDT 2012) which can be installed from the SQL Server 2012 install media. The SSDT 2012 use Visual Studio 2010 shell by default and can be integrated into Visual
Studio 2010. By installing SQL Server Data Tools - Business Intelligence for Visual Studio 2012, we can also integrate SSDT 2012 into Visual Studio 2012. However, SSDT 2012 cannot be integrated into Visual Studio 2013. As far as I know, the SSDT 2014 released
in SQL Server 2014 RTM will use the Visual Studio 2013 shell and can be integrated into Visual Studio 2013.
Regards,
Mike Yin
TechNet Community Support

Data Retrieval from SSRS 2008 R2 to SQL Server 2012 standard

Hello,
We have a virtual machine running SSRS 2008 R2 and a physical server running SQL server 2012 standard. We are having an issue with a report that is taking almost 10 minutes for the data to be retrieved from the sql 2012 database. We used the
execution logging query to debug and analyze. We see that it renders and processes very fast, but the data retrieval time is very slow. When the same query is run using sql studio mgr. from the SSRS server it runs just fine...it
takes seconds for the results to come up.
I don't believe there is a compatibilty issue because other reports run fine. We're just having problems with one report.

A long shot, but I've seen where the data type of a report parameter is mismatched against the data type of the table it is being compared against. SQL profiler would show this clearly.
This would explain why the query returns quickly in ssms but not with the report.

SSIS fails to load files from network when executed via SQL server Agent (SQL server 2008 R2 SP 2)

Hi All,
I have a simple SSIS package that reads a flat file and copies it into a SQL Server table.
When the flat fiel is on the C drive I have no problem runnign this package from SQL Server Agent, but as soon as I update the path to a network location the package only works when I run it manually, but fails when is executed via the SQL Server agent job.
The error says "cannot open the datafile", while the datafile location is valid.
Is this a kind of limitation of a SQL Server Agent that only local files are allowed to be processed?
Thanks,
Andrei
SSIS question

Hi All,
Thanks for your responses.
I configured the SQL agent service to use my domain account with which I have no porblems accessing the folder. However the issue persisted.
Thanks,
Andrei
SSIS question

How to build transitional replication on two different domain servers in SQL server 2012 ?

Hi All,
We have to build transnational replication with updatable subscribers between two different domains .
Is it possible ,if it's possible please share the any document or process .....
Thanks in advance.
RAM

Yes this is possible.
Replication across two non-trusted domains or workgroups can be done by using Windows Authentication by configuring
pass-through authentication.
Create a local Windows account on both the Publisher and Subscriber that has
the same username and password. Use this account for the Merge Agent process account and have the connections to the publisher and distributor impersonate the agent process account. Ensure the account has the permissions required in
Replication Agent Security Model.
This approach is covered in the section Use Windows Authentication to Set Up Replication Between Two Computers Running SQL Server in Non-Trusted Domains in
HOW TO: Replicate Between Computers Running SQL Server in Non-Trusted Domains or Across the Internet.
Another approach to configure replication between non-trusted domains is to use SQL authentication for cross domain connections.
Brandon Williams (blog |
linkedin)

Service Account for SQL Server Agent on SQL Server 2008 R2

This SQL Server instance is SQL Server 2008 R2 (10.50.4000). We had Active Domain Service accounts created to run the service accounts for SQL Server and SQL Server Agent.
It has become company policy to alter the service accounts that run SQL Server and SQL Server Agent. Currently, both were running under the Local System Accounts. We have altered the SQL Server but we are having issues with the SQL Server Agent.
I am told by another DBA that
"The agent is requiring elevated rights. It will startup if it has local admin rights, but not with domain accounts without admin rights."
So I was wondering if anyone has come across this issue and how did they resolve it.
lcerni

"The agent is requiring elevated rights. It will startup if it has local admin rights, but not with domain accounts without admin rights."
This is completely not true. It is indeed possible to run agent as a domain account without giving it local admin. Chances are you'll need to update the local acls by adding the account to the local security groups. Please see this article for more information:
http://technet.microsoft.com/en-us/library/ms143504(v=sql.105).aspx
Edit: In addition, it'll need rights to SQL server for that account to connect and do its work. It will need to be given sysadmin:
http://technet.microsoft.com/en-us/library/ms191543.aspx
Sean Gallardy | Blog |
Twitter

How to connect from InformixDB to SQL Server 2012 (and copy data)

Hello guys
I try to build a connection from an Informix (Informix2000) database to my SQL Server 2012.
I really dont know how to do this...
The plan is to build a job in the night in which data is beeing copied from the InformixDB to my SQL Server 2012
The SQL server should be like a "archive server" (same data as informix DB , but the data should stay for 2 years)
Any idea if this is possible ? (what im trying to do)
Can i do this with ODBC Connection ?
Thanks a lot and Regards, Dominic

Thanks a lot guys... but what im trying to do is not to migrate the hole Informix DB to SQL 2012, i just want to copy some data into my SQL Server (archive). in the informix DB the data is only 30days back... i want to transfer every week
the data and let it on the SQL Server 2 years back. (SQL Server should be like an archive system)
Hello ,
Then you need to create an SSIS package to migrate data from Informix to SQL Server 2008 since Informix is old I dont know which connection provider to use but you can try ADO.NET connection provider
Can you check below link
http://davidbridge.wordpress.com/2012/05/30/extraction-from-informix-database-using-ssis-data-warehouse-etl/
Please mark this reply as the answer or vote as helpful, as appropriate, to make it useful for other readers

Javahelp Search -- Failed to create URL from jar

When I attempt to use my search feature, I get the following message:
Failed to create URL from jar:file:C:\ulcpen10.jar!/ulcp.hs|C:/src/db/pubs/ulc/javahelp/cp-ulc-generatedid-55.html
Failed to create URL from jar:file:C:\ulcpen10.jar!/ulcp.hs|C:/src/db/pubs/ulc/javahelp/cp-ulc-odbc-tutorial-s-5132529.html
Failed to create URL from jar:file:C:\ulcpen10.jar!/ulcp.hs|C:/src/db/pubs/ulc/javahelp/cp-ulsynchronize-library-sesql.htmlpresumably, the files that were found in the search were:
cp-ulc-generatedid-55.html
cp-ulc-odbc-tutorial-s-5132529.html
cp-ulsynchronize-library-sesql.html
but it seems the URL being built is incorrect. I am building my search like so:
in the xml:
<view>
<name>Search</name>
<label>Search</label>
<type>javax.help.SearchView</type>
<data engine="com.sun.java.help.search.DefaultSearchEngine">
JavaHelpSearch
</data>
</view>
and in the java:
     _jhIndexer = new com.sun.java.help.search.Indexer();
     //outDir is the directory the help is compiled to -- defined earlier
     String searchName = "JavaHelpSearch";
     String args[] = new String[ 3 ];
     args[ 0 ] = "-db";
     args[ 1 ] = outDir + searchName;
     args[ 2 ] = outDir;
     try {
         _jhIndexer.compile( args );
     } catch( Exception e ) {
         e.printStackTrace();
     //addDirectory copies everything from ourDir/searchName to jar/searchName
     jarFile.addDirectory( searchName, outDir + searchName, null );Any ideas how to fix this?
Thanks,
Aarnott

Yesterday I met with the same problem with you, and I read the Javahelp_Guide for several times and today I solve the problem. I reply the topic and want to share the experience with friends.
First cofirm that you have created the html pages, .hs file, index file, TOC file, map file, and be sure they all work well. We assume you put the last 4 files in D:\HelpFile, and the html pages in D:\HelpFile\HelpPage
Now we come to the second step -- generate the Full-Text Search Database.
1. Open "Start" -> "Run" in windows, and input "cmd" command.
2. Switch to your help folder, here we assume it as D:\HelpFile
3. Find the path of the jhindexer in the javahelp\bin folder of the JavaHelp system release, e.g E:\JavaHelp\bin
4. Input the following command in cmd.exe you just open in step 1:
E:\JavaHelp\bin\jhindexer HelpPage
the command means to call the tool jhindexer to generate the Full-Text Search database for the html pages in folder HelpPage
5. you'll find a new folder named JavaHelpSearch generated in the current folder D:\HelpFile
6. Pack all the files in folder D:\HelpFile as a jar file and you can use it in your system
Note: 1. avoid asian character in your folder path, though there's no obvious reason but we should avoid possible error.
2. Full-Text Search need no programming in your program, just do it as the steps ibid.
release: Javahelp 2.0.05
Operation System: Windows XP

Linked Server error: Login Failed for user 'NT AUTHORITY\ANONYMOUS LOGON' between sql server 2005 32 bit and sql server 2012 64 bit

Hi All,
Here the linked server is created between sql server 2012 64 bit and sql server 2005 32 bit. I am getting the below error when i try to access linked server from third server. I have created linked from Instance 1 to Instance 2. When i access it from
instance 3 i am getting the below error. SPN setting has been done between these 2 servers. Also the option 'Trust the delegate' is enabled for the both the service account.
'Login Failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
Appreciate your quick response.
Vikas.M.S

Hello,
Please read the following resources:
http://www.databasejournal.com/features/mssql/article.php/3696506/Setting-Up-Delegation-for-Linked-Servers.htm
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/ea26de43-4c6b-4991-86d7-e1578f107c92/linked-server-login-failed-for-user-nt-authorityanonymous-logon?forum=sqldataaccess
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Failed to create LOGIN from a domain account on SQL Server 2012

Similar Messages

Maybe you are looking for