Service/Database Accounts - NT SERVICE\MSSQLSERVER & NT SERVICE\SQLSERVERAGENT - what are they for?

Hi Guys,
I’ve done a fair amount of research for this question but just cannot seem to find the answer to my question in simple, non-DBA, terms.
Server 2008 R2
SQL 2008 R2
There are 2 users in the system database logins (NT SERVICE\MSSQLSERVER, NT SERVICE\SQLSERVERAGENT) … what are they for? It appears that they
are accounts to run the corresponding Windows services but yet they cannot be selected from the list of available built-in accounts, local accounts or domain accounts.
Also, I am using a couple of domain user accounts to run the services, do I need to add them to the database? I changed the service accounts from NETWORK
SERVICE to the domain user accounts using the SQL Configuration Manger which is supposed to take care of managing the user group membership and registry changes but the domain accounts are not in the database …. The services appear to be running fine.
Thanks

In basic terms:
As you say, in the SQL Server Database Engine there are two logins;
NT SERVICE\MSSQLSERVER and NT SERVICE\SQLSERVERAGENT. The Database Engine runs in Windows as a Windows service named
MSSQLSERVER. The NT SERVICE\MSSQLSERVER login is used by the service to connect to the Database Engine. Basically, this is how it connects to itself. The SQL Server Agent runs as a Windows service named
NT SERVICE\SQLSERVERAGENT. The NT SERVICE\SQLSERVERAGENT
login is how the Windows process that is SQL Server Agent connects to the Database Engine to read the
msdb database to find out what it should do; and then do it. Both of these logins are members of the
sysadmin fixed server role, so they can do anything in the Database Engine. And they need to stay that way.
No, they can't be selected in the list of available built-in accounts, local accounts or domain accounts. This is because they are services, not accounts. They have a security identifier (SID) in Windows,
but Windows knows they aren't real users. Windows can authenticate them, but they don't have passwords that any human can use. If you run
lusrmgr.msc and look at the groups, you will see groups like
SQLServerMSSQLUser$computername$MSSQLSERVER and NT SERVICE\MSSQLSERVER
is a member of the group.
As for the account that you used to run the services, this is complicated and has changed from SQL Server 2005 to SQL Server 2008 and now again in SQL Server Code Named 'Denali'. The short answer is that
the account you specify will be used when a process tries to reach outside of the current Windows environment. But within the computer, there is a mix of authorization granted to the domain user, the service, and the Windows group
SQLServerMSSQLUser$computername$MSSQLSERVER.
The good news is that SQL Server Configuration Manager figures out all the stuff you need when you change the accounts. If you are a glutton for punishment, you can get an idea for how complicated this
is by looking at the Denali documentation where I have tried to provide more specific information. (Note this is not the same as SQL Server 2008.) You can see it at:
Configure Windows Service Accounts and Permissions
http://msdn.microsoft.com/en-us/library/ms143504(SQL.110).aspx
Rick Byham, Microsoft, SQL Server Books Online, Implies no warranty

Similar Messages

SCCM 2012 SP1 - Evil Folders in Reporting Services - What Are They and How to Remove Them

Hello All,
There are a lot of sub-folders in the http://CentralSiteSCCM/ReportServer. They are like:
<dir> Config_Mgr_CEN
<dir> Config_Mgr_CEN.OLD.0
<dir> Config_Mgr_CEN.OLD.1
<dir> Config_Mgr_CEN.OLD.10
<dir> Config_Mgr_CEN.OLD.100
<dir> Config_Mgr_CEN.OLD.1000
Only <dir> Config_Mgr_CEN is properly populated with the correct set of the default folders.
Would you be so kind to advise on:
What are they?
How to remove them?
What to do in order for them not to appear any more?
Thank you very much in advance!

Hi Mike,
I ran into an issue when I did the SP1 upgrade where a majority of our reports were duplicated. I created a script to delete these duplicate reports and I've adjusted it to work for your situation. You can find the original thread here, if you're interested:
http://social.technet.microsoft.com/Forums/en-US/configmanagergeneral/thread/dc9aa3b4-cea9-4a07-87ca-2795a2dbc04e
You'll need to know your SCCM site code and the server name to run this script.
# SCCM2012SP1-RemoveDuplicateSSRSFolders.ps1
# This script will connect to SSRS on a specified server and delete all folders that end with .OLD.*
# Used for SSRS cleanup after SCCM 2012 SP1 installation
# Script must be run from an account that has access to modify the SSRS instance
# 3/22/2013 - Mike Laughlin
# Resources used in writing this script:
# Starting point: http://stackoverflow.com/questions/9178685/change-datasource-of-ssrs-report-with-powershell
# API Documentation: http://msdn.microsoft.com/en-us/library/ms165967%28v=sql.90%29.aspx
# Previous script: http://social.technet.microsoft.com/Forums/en-US/configmanagergeneral/thread/dc9aa3b4-cea9-4a07-87ca-2795a2dbc04e
# Define variables
$SiteCode = ""
$serverName = ""
# Set the value of $noConfirm to $True only if you don't want to manually confirm folder deletion. Use with caution.
$noConfirm = $False
# Safeguard
If ( $SiteCode -eq "" -or $serverName -eq "" ) { Write-Host "Enter the required information for the SiteCode and serverName variables before running this script." -ForegroundColor Red -BackgroundColor Black ; Exit }
# Connect to SSRS
$ssrs = New-WebServiceProxy -uri http://$serverName/ReportServer/ReportService2005.asmx?WSDL -UseDefaultCredential
# Get a listing of all folders in SSRS
$reportFolders = $ssrs.ListChildren("/", $True)
# Find all folders containing .OLD.*
$foldersToDelete = $reportFolders | Where { $_.Name -like "ConfigMgr_" + $SiteCode + ".OLD.*"}
# Quit if no folders are found
If ( $foldersToDelete.Count -eq 0 ) { Write-Host "No folders with .OLD.* found. Quitting." ; Exit }
# Show a listing of the folders that will be deleted
Write-Host "The following folders will be deleted from SSRS on" $serverName":`n"
$foldersToDelete.Name
Write-Host "`nTotal number of folders to delete:" $foldersToDelete.Count "`n"
# Get confirmation before deleting if $noConfirm has not been changed
If ( $noConfirm -eq $False )
$userConfirmation = Read-Host "Delete these folders from" $serverName"? Enter Y or N"
If ( $userConfirmation.ToUpper() -ne "Y" ) { Write-Host "Quitting, folders have not been deleted." ; Exit }
# Delete the folders
$deletedFolderCount = 0
Write-Host "Beginning to delete folders now. Please wait."
ForEach ( $folder in $foldersToDelete ) { $ssrs.DeleteItem($folder.Path) ; $deletedFolderCount++ }
Write-Host "Folders have been deleted. Total number of deleted folders:" $deletedFolderCount
Standard disclaimer: While this script worked just fine for me in my environment, I make no guarantees that it will work anywhere else. I've attempted to make this script as user friendly and generic as possible, but it may require slight tweaking to work properly.

What are solutions for a way-too-big database?

Hi guys!
I'm a software developer and not very good in database designing. One day, I was asked something like this :
"For example, there is a company with a web application. One day, the database for that application is way too big, caused performance issues and others, what is the solution for that application database?"
At first, I thought that was about using multiple database with single app. But I don't know if I was right.
I want to ask that what are the solutions? If it's "multiple database" then what should I do? Using two connection to 2 database simutaneously?
I appreciate any replies. Thanks!

847617 wrote:
Thanks Lubiez Jean-Val... for your links.
I've got some more advices like :
- "transferring workload to another database using different techniques to copy the data from original db"
- "redesign of the database"
So that means we use 2 different databases?Sometimes it is deemed desirable to keep only fairly recent data on the OLTP database, where the normal transaction activity happens, and replicate the data to another database that also contains historical data. This second database is used for heavy reporting tasks.
And "redesign"?As in, design it from scratch and do it right this time. Make sure all data relations are properly defined to Third Normal Form; make sure all data is typed properly (use DATE columns for dates, NUMBER columns for numbers, etc); make sure you have designed effective indexing; make sure you use the capabilities of the rdbms and do NOT just use it as a data dump.
See http://www.amazon.com/Effective-Oracle-Design-Osborne-ORACLE/dp/0072230657/ref=sr_1_3?s=books&ie=UTF8&qid=1301257486&sr=1-3
are they really good solutions?Like most everything else, "It depends"
It depends on if the proposed solutions are implemented properly and address the root problem. The root problem (or even perceived problem) hasn't yet been defined. You've just assumed that at some undefined point the database becomes "way-too-big" and will cause some sort of problem.
It's assumed that we don't have or can't use partitioning.
And why is that assumed? Yes, you have to have a version of Oracle that supports it, and it is an extra cost license. But like everything else, you and your management have to do a hard-nosed cost/benefit analysis. You may think you can't afford the cost of implementing partitioning, but it may be that you can't afford the expenses derived from NOT implementing it. I don't know what the case is for you, but you and your management should consider the factors instead of just rejecting in out of hand.
:):)...You are making me - a student so excited about the history. From slides rule to the moon....
Edited by: 847617 on Mar 27, 2011 10:01 AMEdited by: EdStevensTN on Mar 27, 2011 3:24 PM

"TDB database version 6" files in / what are they?

I've noticed 2 files in my / directory
-rw------- 1 root admin 8192 3 Dec 21:18 8c4fd358-0d17-e8df-8261-5c6d81d639c0-dinfo-w90pIK
-rw------- 1 root admin 8192 3 Dec 21:18 8c4fd358-0d17-e8df-8261-5c6d81d639c0-icnt-4l2pZ0
which have appeared there recently. File says that these are "TBD" files:
file /8c4fd358-0d17-e8df-8261-5c6d81d639c0-*
/8c4fd358-0d17-e8df-8261-5c6d81d639c0-dinfo-w90pIK: TDB database version 6, little-endian hash size 131 bytes
/8c4fd358-0d17-e8df-8261-5c6d81d639c0-icnt-4l2pZ0: TDB database version 6, little-endian hash size 131 bytes
Any suggestions what these are?

http://discussions.apple.com/thread.jspa?messageID=4275025

Mail database error and unknown folders - what are they?

Hi - Forgive an elementary question: I administer a small office network, but am NOT an IT expert!
We've been running OS X 10.5. server for quite some time and are now on 10.5.8 with client workstations all running 10.6.1. We've had a problem with a corrupt cyrus database reporting (amongst other things):-
"DBERROR db4: Database environment corrupt; the wrong log files may have been removed or incompatible database files imported from another environment"
This is well covered elsewhere, but despite downloading and running mailbfr I have not been able to get rid of the problem. However, my question is this: whilst rooting around the mail database I have found the following folders:
var/spool/imap/^-^_-+^_-+^_-^-obscure
var/spool/imap/^_-bingey
var/spool/imap/^_-delegating
var/spool/imap/^_-moustache
var/spool/imap/^_-obscure
var/spool/imap/^_-plebes
var/spool/imap/^_-reinserting
Each of these folders has a cyrus.cache, cyrus.header and cyrus.index file inside. I can find no relevant search results when I check these folder names out with an internet search, so I'm wondering whether these folders should even be there? Have they been installed covertly, and if so can I remove them without further damaging our database?
Any help would be appreciated.
Thanks

http://discussions.apple.com/thread.jspa?messageID=4275025

What are considerations for Highly Transactional Database

Hi,
Can anyone please tell me about considerations for highly transactional database? Is Oracle 10g RAC better or Oracle DB with dataguard?
Thanks.
Regards,
RJiv.

I'm still not understanding what your question is... Load characteristics are quite irrelevant when discussing the necessity of DataGuard, though the amount of redo generated obviously impacts how much bandwidth is required between the primary and standby site. Bare transaction numbers are somewhat irrelevant when discussing the necessity or advisability of RAC since the amount of work a "transaction" does depends wildly on the application, the number of "transactions" a server can handle depends wildly on the hardware, and the business's need for scalability/ load balancing/ surviving node failure are independent of the transaction load.
Justin

What are steps for transitioning from my current CC team account to new CC individual account?

Hi, I can not find any info to this question. I currently have a team (company) membership that is to expire soon. I will be getting a new CC individual (educational) licence then. What are the steps to install this new license onto my computers? I can not seem to find this info anywhere. Thanks!

CN1982 wrote:
Hello myFico subscribers, How can I improve my current scores? 1-Unsecured CapOne platinum CC $1200, 1-CapOne QuickSilver Secure CC $15001- FingerHut-$500, Victoria Secret- $300. How do I use the CC for me to see the benefits from usagae. Am I suppose to use less than 15% and pay it down before the statement is generated? Or, the CC needs to report a small balance each month. Current scores: July 7, 2015EQ: 622, TU: 659, EX:637I would also ask how long you have had each card? I would also suggest making a small purchase with the cards pretty much every month or at least every other month to show that you are 'interested' in their cards. And of course, keeping an eye towards getting the QuickSilver to be unsecured, and if you use it for expenses, it should be that way in time. For the unsecured cards, you could check to see if they have a CLI request button online, or maybe a chat option to ask for an increase. I believe Cap1 is once every 6 months. I do not have any experience or knowledge about asking for a CLI on a secured card, not sure if that's possible or not. Other than that, keep everything paid on time and your scores will rise over time, as mentioned. hth ETA: The benefit to getting larger CLIs is that it will help your utilization and that as you get larger CLIs, it will promote or suggest that other CCCs also offer you a larger CLI or in the case of a new card, a larger SL. It will also happen as your scores increase. Also, Jackielee explained everything very well and I didnt mean to overwrite anything, just to supplement it.

Duplicating Analysis Services Database

Hi All,
I am having an Analysis Services Database cube as DW_cube which i wanted to duplicate as DW_cube1 for some testing purpose..
i am new to thing can anyone help me out.

Hello,
You can copy a database by backup and restore; see
Backup and Restore of Analysis Services Databases
Olaf Helper
[ Blog] [ Xing] [ MVP]

Service Tax on Freight & Excise duty on Service

Hi.
In Sales Order From Factory,
1)The Service tax on Freight is paid by customer. ie. one condition type exist that is Service tax on Freight,
Since it is service tax, it should hit RG23A part1
2)Also "Education cess" and "Higher Education Cess" are applicable on service tax paid.
we cant enter Education cess"(JECS) and "Higher Education Cess"(JA1X) twice in Sales Order. one to calculatate on Basic and one to calculate on Service tax.
also if i create 2 diff. condition type JECS and JEC1 , JA1X and JA1Y, how to configure that in CIN "Specify G/L Accounts per Excise Transaction" which supports only one conditon type.
Reg,
Amol

Hi Amol,
Unlike excise duty, service tax cannot be mentioned in Specify G/L Accounts per Excise transacion as the excise invoice are created for excise duties billing document
Also service tax will not be displayed in RG23A1 i believe it will be only for goods, correct me if i am wrong
Thanks,
Ramesh

My i-phone Not charging because Sunken pins and Green Belt3 Power Mac Center said even my warranty still open until 30 October they cannot do nothing and refer me to a Toll Free Apple customer Service number..my question for what are thwy there?

My i-phone 5s is not charging because of Sunken pins where the socket is plugged. According Power Mac Center at Green Belt3 even my warranty still open until 30 October they cannot do nothing and refer me to a Toll Free Apple customer Service number in Singapore!!! ..my question for what are they there? not alt all very friendly and helpful!!

Send an e-mail with all this in it directly to Tim Cook. Seriously. You can send e-mail to him.
You might also try this forum here for more ideas: http://forums.macrumors.com/index.php?

What are the difference between apple id, icloud & itunes account?

Hello every one. I am extreamly new in apple device. From last couple of days i using mac & suddenly i confused about all the differency between apple id, icloud & itunes account. Can one told me what are they using for?
Another question is, i am using it from Bangladesh. So can i use "Find My Mac" application on my device? If yes, what are the procedure of it?
Thanks a lot in Advance.

iTunes Store, App Store, iBooks Store, and Mac App Store account
When you use Apple services, such as the Apple Online Store or registering your product online, you create an Apple ID. You can use the same Apple ID for iTunes, the Mac App Store, iCloud, iMessage, FaceTime, Game Center, and more.
It is recommended to use only one Apple ID.
If you have registered your product or used any Apple services, you should follow this article to use an existing Apple ID with the iTunes Store or Mac App Store.
http://support.apple.com/kb/HT2534
Direct you to the proper forum for MacBook :
MacBook Series Forums
https://discussions.apple.com/community/notebooks?view=discussions
Mac OS X Forum
https://discussions.apple.com/community/mac_os?view=discussions
http://www.apple.com/support/macbookpro

Account 'Acquisition:Acquis. and production costs' could not be found for a

dear all
when i am posting periodic asset postings through ASKB below error is comming ple help
Account 'Acquisition:Acquis. and production costs' could not be found for area 90
Message no. AU133
Diagnosis
When creating the accounting document, the system could not find account 'Acquisition:Acquis. and production costs' in depreciation area 90 for company code SCIL.
Procedure
Enter this account in the account determination for Asset Accounting.
thanks

Dear bikkina.prakash
please check were you properly maintained the AO90 for GLs for Depreciation
also check whether you changed any depreciation key in asset master(means previously you run depreciation. by mistakenly any body changed)
Regards
shankar

SCCM 2007 R2: PXE Service Point Properties: Database Account

Got the following constellation:
Site Server: SRV01 (W2K8 / SCCM 2007 R2)
SQL Server: SRV02 (W2K8 / SQL 2008 )
Deploy Server: SRV03 (W2K8)
Basic Installation worked. Now I try to install DP and PXE Role on SRV03. All servers are member of each other's local admin group (all servers are running in one domain).
I installed WDS on SRV03. Everything's fine. After that I configured PXE role on SRV01 for SRV03 (configured nothing special in this area) WDS stopped on SRV03. After defining a PXE service point's computer account (a domain admin account that is also member of the local admin group of each server) in SCCM admin console on SRV01 for thePXE Role on SRV03 the WDS service on SRV03 able to start.
Looking at SQL Server during my tests I can see that the server account of SRV03 was properly added to the SMS DB with expected PSP_Role.
What is the reason that I'm not able to get the WDS service started on SRV03 without a special PXE service point account?
Thanks in advance for any idea.
Alex

I'm having the same issue, same kind of setup and error in my logs. I'm not able to kickstart the WDS Service of my DP with the computer account. However, if I use the ConfigMgr account it works without any problem. There is no indication that there is
an issue with the computer account's permissions.
I did activate Verbose logging on the DP and when trying to start WDS Service I get the following:
[1948] 19:51:28: WDS Diagnostics Initialized
[1948] 19:51:28: [Profiles] Initialized.
[1948] 19:51:28: [MCSCOPE] Address Range=239.0.0.1-239.0.0.254, Count=254
[1948] 19:51:28: [UDPPorts] Dynamic Port Range: 64001-65000.
[1948] 19:51:28: [RPC] Using Tcp Port 5040 for Rpc Calls.
[1948] 19:51:28: [RPC] Client Impersonation Logging=Disabled
[1948] 19:51:28: [RPC] Host Name: debobnbk02.emea.att.com
[1948] 19:51:28: [RPC] NTLM/Kerberos Spn: ldap/debobnbk02.emea.att.com
[1948] 19:51:28: [RPC] Initialized
[8920] 19:51:28: [RPC] Server Started.
[1948] 19:51:28: WDS VSS Writer Pre-Initialized
[1948] 19:51:28: [BINLSVC][RPC] Registered
[1948] 19:51:28: [BINLSVC] Provider Initialized.
[1948] 19:51:28: [218][WdsImgSrv] -> Initialize
[1948] 19:51:28: [249][WdsImgSrv] -> pInitializeManagement
[1948] 19:51:28: [327][WdsImgSrv] <- pInitializeManagement=c1030104
[1948] 19:51:28: [327][WdsImgSrv] <- Initialize=c1030104
[1948] 19:51:28: [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\server\src\wdsprovider.cpp:147] Expression: , Win32 Error=3238199556
[1948] 19:51:28: [WdsImgSrv] Initialization Failed (rc=3238199556)
[1948] 19:51:28: [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\server\src\wdsprovhdl.cpp:169] Expression: , Win32 Error=3238199556
[1948] 19:51:28: [WdsImgSrv] Deleted.
[1948] 19:51:29: [WDSMC][RPC][Ep=Registered
[1948] 19:51:29: [WDSMC][RPC][Ep=Registered
[1948] 19:51:29: [WDSMC] Provider Initialized.
[1948] 19:51:29: [1201][WDSPXE] -> CBannedGuids::Initialize
[1948] 19:51:29: [1201][WDSPXE] -> CBannedGuids::Shutdown
[1948] 19:51:29: [1201][WDSPXE] <- CBannedGuids::Shutdown=0
[1948] 19:51:29: [1201][WDSPXE] <- CBannedGuids::Initialize=0
[1948] 19:51:29: [1825][WDSPXE] [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\wdspxe\src\pxeprov.cpp:172] Expression: , Win32 Error=3661
[1948] 19:51:29: [1825][WDSPXE] [SMSPXE] Initialization failed (rc=3661)
[1948] 19:51:29: [1825][WDSPXE] [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\wdspxe\src\pxeprovhdl.cpp:481] Expression: , Win32 Error=3661
[1948] 19:51:29: [1825][WDSPXE] -> CBannedGuids::Shutdown
[1948] 19:51:29: [1825][WDSPXE] <- CBannedGuids::Shutdown=0
[1948] 19:51:29: [1825][WDSPXE] [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\wdspxe\src\pxeprovhdl.cpp:598] Expression: , Win32 Error=3661
[1948] 19:51:29: [1825][WDSPXE] [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\wdspxe\src\pxemain.cpp:201] Expression: , Win32 Error=3661
[1948] 19:51:29: [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\server\src\wdsprovider.cpp:147] Expression: , Win32 Error=3661
[1948] 19:51:29: [WDSPXE] Initialization Failed (rc=3661)
[1948] 19:51:29: [1825][WDSPXE] -> CBannedGuids::Shutdown
[1948] 19:51:29: [1825][WDSPXE] <- CBannedGuids::Shutdown=0
[1948] 19:51:29: [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\server\src\wdsprovhdl.cpp:169] Expression: , Win32 Error=3661
[1948] 19:51:29: [WDSPXE] Deleted.
[1948] 19:51:29: [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\server\src\wdsservice.cpp:177] Expression: , Win32 Error=3661
[1948] 19:51:29: [Udp] Listen Shutdown.
[8388] 19:51:29: [NetMon] Network Interface(s) Change Notification
[8920] 19:51:29: [RPC] Server terminated (rc=0)
[1948] 19:51:29: [RPC] Listen Stopped.
[1948] 19:51:29: [BINLSVC] Shutting down
[1948] 19:51:29: [BINLSVC][RPC] Closed
[1948] 19:51:29: -> CBannedGuids::Shutdown
[1948] 19:51:29: <- CBannedGuids::Shutdown=0
[1948] 19:51:29: -> CBannedGuids::Shutdown
[1948] 19:51:29: <- CBannedGuids::Shutdown=0
[1948] 19:51:29: [BINLSVC] Deleted.
[1948] 19:51:29: [WDSMC] Shutting down
[1948] 19:51:29: [WDSMC][RPC] Closed
[1948] 19:51:29: [WDSMC][RPC] Closed
[1948] 19:51:29: [WDSMC] Deleted.
[1948] 19:51:29: [d:\longhorn\base\ntsetup\opktools\wds\wdssrv\server\src\ifmonitor.cpp:174] Expression: , Return Value=1 (WSLE=10038)
[1948] 19:51:29: Timer Queue deleted successfully.
[1948] 19:51:29: WDS Vss Writer Shutdown
Doesn't really tell much, but if there is someone who can shed a light on this, or tell me in which direction I need to look...

A question regarding using a JDBC class to connect with cloud service database

Hello,
I am currently working on a small scale cloud service report where the company I chose is obviously Oracle. My question is regarding the cloud service in the following way. I was doing my report with the free trial until it just came to me that
why not to do a small one class program with my netBeans or Eclipse that uses JDBC but I am not sure what username, password and the url to use in the connection to retrieve, manipulate and store values. Can somebody help me please if this is possible or not?
edit: Anyone please? I have a deadline in 15.8. and could create something great until then if I get the anwser in few days

To correct my question, I already have the oracle account and I created the cloud service trial account with database and java section.

Changing sql server service and sql server agent service startup account in SQL Server hosting SharePoint DB

Hi
i have a sharepoint deployment with one SQL Server (running on VM) hosting the config DB and another SQL Server (Physical Host because VM was running out of space) to host the huge Content DBs. I need to schedule automatic backups of the Content DBs to a
network share. For that i need to run the SQL Server Service with an account having permissions to the share as suggested in https://support.microsoft.com/kb/207187?wa=wsignin1.0
I tried changing the logon as a service account to a domain
account which has permissions to the Network Share and is also in local Administrators group of SQL Server and has "public and sysadmin" roles in SQL Server but that caused an issue. the SharePoint Web Application started showing a White Screen so
I had to revert back to the default accounts i.e. NT Service\SQLSERVERAGENT and NT Service\MSSQLSERVER. I viewed the event logs . These are the types of error i got after changing the logon as a service account to a domain account
1) Information Rights Management (IRM): Retried too many times to initialize IRM client. Cannot retry more. Retried times is:0x5.
System
Provider
[ Name]
Microsoft-SharePoint Products-SharePoint Foundation
[ Guid]
{6FB7E0CD-52E7-47DD-997A-241563931FC2}
EventID
5148
Version
15
Level
2
Task
9
Opcode
0
Keywords
0x4000000000000000
TimeCreated
[ SystemTime]
2015-02-02T04:46:04.750899500Z
EventRecordID
176477
Correlation
[ ActivityID]
{8FACE59C-1E17-50D0-7135-25FDB824CDBE}
Execution
[ ProcessID]
6912
[ ThreadID]
8872
Channel
Application
Computer
Security
[ UserID]
S-1-5-21-876248814-3204482948-604612597-111753
EventData
hex0
0x5
2)
Unknown SQL Exception 0 occurred. Additional error information from SQL Server is included below.
The target principal name is incorrect. Cannot generate SSPI context.
System
Provider
[ Name]
Microsoft-SharePoint Products-SharePoint Foundation
[ Guid]
{6FB7E0CD-52E7-47DD-997A-241563931FC2}
EventID
5586
Version
15
Level
2
Task
3
Opcode
0
Keywords
0x4000000000000000
TimeCreated
[ SystemTime]
2015-02-02T07:01:35.843757700Z
EventRecordID
176490
Correlation
[ ActivityID]
{50B4E59C-5E3A-50D0-7135-22AD91909F02}
Execution
[ ProcessID]
6912
[ ThreadID]
5452
Channel
Application
Computer
Security
[ UserID]
S-1-5-17
EventData
int0
0
string1
The target principal name is incorrect. Cannot generate SSPI context.

Hi Aparna,
According to your description, you get the above two errors when scheduling backups of Content DB. Right?
Based on those two error messages, they are related to the service principal name(SPN) for SQL Server service. Please verify the if the SPN is registered successfully. You can view it in ADSI Edit or use command line. Please see:
http://blogs.msdn.com/b/psssql/archive/2010/03/09/what-spn-do-i-use-and-how-does-it-get-there.aspx
When installing SQL Server, those two services below should be registered:
MSSQLSvc/servername:1433
MSSQLSvc/servername
Please check if those SPNs or duplicated SPNs exist. You can use command to reset SPN or remove duplicated SPN and add new one. See:
Setspn.
We have also met this issue when this SPN is registered under Administrator. Please try to register it under Computer. You can add it in ADSI Edit.
If you have any question, please feel free to ask.
Simon Hou
TechNet Community Support

Service/Database Accounts - NT SERVICE\MSSQLSERVER & NT SERVICE\SQLSERVERAGENT - what are they for?

Similar Messages

Maybe you are looking for