True Virtual Accounts
I've called and asked Apple about enabling this numerous times.
The fact is that you have to create an account on the server for anyone to pop/imap mail off of it. First off this ignores the concept of a Virtual Mail Server.
Problem #1: By having a Non-Virtual account (lets call it "steve") setup like that "steve@anydomain_in_the_mail_serverconfig" will go to account "steve" unless it is specifically told not to.
Problem #2: Instead of using "steve@thedomain_hesat" to log into webmail, pop, imap, smtp, etc only "steve" is used. Again this ignores the Virtual Mail Server concept.
I guess the question is will Apple every change it's Mail Server setup to be ISP friendly?
Hi,
Thank you for posting in Windows Server Forum.
Can you just confirm as what version of server you want to use for virulization( server 2008 R2 or server 2003)? Also please specify little more details for your case.
Because if you want to have server 2008 R2 used then you have different option. As you can also take benefit of RemoteApp feature. Through RemoteApp we just need to publish the application which we want to use and user can access through RD Web access site
and we don’t need to place on any particular place to use.
What is RemoteApp?
http://technet.microsoft.com/en-in/library/cc755055.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Similar Messages
-
SQL Server 2012 Express Install on Windows 7 SP1 Embedded not using virtual account?
Hi there,
I did a default installation of SQL Server 2012 Express on Windows 7 embedded Standard SP1.
When I look at the SQLSERVER service credential it is configured to run under "NETWORK SERVICE" instead of the virtual account "NT SERVICE\MSSQL$SQLEXPRESS".
This is different from SQL 2012 Express installation on a non-embedded Windows 7.
Why is this difference?
Secondly, because of this, I am unable to take a backup of databases to any folder other than the default SQL folder.Hi Chandrasekaran,
As Local Service account, the Network Service account and high privileged Local System account could be used by many services.
It becomes harder to track which service is actually accessing resources and performing actions, because all the services are using the one Network Service account or other account.
In Windows7 and Windows Server 2008R2, it introduces a new type of account called a virtual account, which emulates creating many unique instances of the Network Service account, so each service runs with its own instance of the Network Service account.
For example, when you install SQL 2012 on Windows Server 2008 R2 or Windows 7 and later you’ll see the services run with virtual service accounts named like:
in the format NT SERVICE\<SERVICENAME>.
According to your description, when the SQLSERVER service was run under “NETWORK SERVICE”, you only back up database to the default SQL folder. It may be caused by the NETWORK SERVICE account has limited local privileges, just accesses network
resource with the computer credential. I recommend you change the account to Local System account, by default, which has full permissions on your computer.
For more information about SQL Server service account and virtual account, you can review the following articles.
http://www.travisgan.com/2013/06/sql-server-service-account-and-per.html
http://www.sqlservercentral.com/blogs/sqldbauk/2014/01/13/sql-server-2012-and-virtual-service-accounts/
http://msdn.microsoft.com/en-us/library/ms143504(v=sql.110).aspx
Regards,
Sofiya Li
Sofiya Li
TechNet Community Support -
Why would you use a managed service account rather than a virtual account in SQL Server 2012?
In SQL Server 2012, service accounts are created as
virtual accounts (VAs), as described
here, as opposed to
managed service accounts (MSAs).
The important differences I can see for these, based on the descriptions:
MSAs are domain accounts, VAs are local accounts
MSAs use automagic password management handled by AD, VAs have no passwords
in a Kerberos context, MSAs register SPNs automatically, VAs do not
Are there any other differences? If Kerberos is not in use, why would a DBA ever prefer an MSA?
UPDATE:
Another user has noted a
possible contradiction in the MS docs concerning VAs:
The virtual account is auto-managed, and the virtual account can access the network
in a domain environment.
versus
Virtual accounts cannot be authenticated to a remote location. All virtual accounts
use the permission of machine account. Provision the machine account in the format
<domain_name>\<computer_name>$.
What is the "machine account"? How/when/why does it get "provisioned"? What is the difference between "accessing the network in a domain environment" and "authenticating to a remote location [in a domain environment]"?Hi,
“Virtual accounts cannot be authenticated to a remote location. All virtual accounts use the permission of machine account. Provision the machine account in the format <domain_name>\<computer_name>$.”
“The virtual account is auto-managed, and the virtual account can access the network in a domain environment. If the default value is used for the service accounts during SQL Server setup on Windows Server 2008 R2 or Windows 7, a virtual account
using the instance name as the service name is used, in the format NT SERVICE\<SERVICENAME>”
Per the above description, they are two concepts and not conflict with each other.
As you understand, virtual account access network resources by using the credentials of the computer account. Generally, computer account will not be granted permission unless giving the computer account permission on the shared folder manually.
Thanks.
Tracy Cai
TechNet Community Support -
Will there be an update to:Virtual Account Numbers for Firefox 5.0?
The Extension: Virtual Account Numbers........ works in Firefox 3. , but has been disabled for Firefox 4. and 5.
Is there a proposed update. or must I revert to Internet Explorer?You need to go to the developer to see if there are plans for an update.. This is not part of Firefox and is not an official Firefox extension. Your bank might be able to help.
-
Add login to sql 2012 server for a virtual account from another sql 2012 server
I have two sql 2012 servers.
Server A has sql server agent running virtual account: NT Service\SQLSERVERAGENT
Server B has some databases.
Server A is running a scheduled SSIS package that needs access to Server B's databases via Windows Auth
Thus I want to grant access by creating a login on Server B to the virtual account on server A: NT Service\SQLSERVERAGENT
Q1 - Is this possible?
Thanks beforehand.
PaulinoRaul,
As a matter of a test and not with the actual intention to use it this way, I did try to add a login using the DOMAIN\MACHINE_NAME$
concept but it did not work anyway. I will not find it.
So I will use one of the approaches recommended by Mr. Gallardy
Thanks!
Paulino -
Hi,
I have a virtual e-mail account that is being forwarded to my Gmail account. In turn, the Gmail account is being forwarded into Mail.
Since I am already receiving mail from this virtual account, is there any way to send as this account as well? I know I can't add a new account, since I can't send from the same Gmail POP as the other one. Is there a workaround for this?
Thanks!you could add the email address of that virtual account in mail>preferences>accounts, select the gmail account, and then in the email field, add that virtual email address following the gmail address, separated by a coma.
you will then be able to send as either this virtual email address or the gmail address when you create a new email. do note that you will be sending with the same name, the name associated with the gmail account.
hope this helps -
Message KI249 assign only one true cost account object
Hi SAP gurus,
I am trying to create a sales order by assigning an internal order for which revenue posting (cost element category 11) is allowed (revenue posting box checked). But system only is picking up profit center assigned to internal order and not treating internal order as real account assignment. If I enter internal order system gives me an error "message no KI249 enter only one true account assignment"
I was able to post FB50 with the same revenue cost element to the same internal order.
Can you please help me with this.
James.Hi,
Actually after some more research we determined that if we enter plant to the revenue items which are entered in the contract we are not able to enter order to which revenue should be booked. But we if remove plant we can enter the order and revenue is booked to real internal order.
But we need to enter plant becuase tax cannot be calculated if don't enter plant.
so what is the relationship between plant and internal order in this case? Why am I not able to enter order if I enter plant. system .
gives an error "enter only one true account assignment" I don't get this error if I don't enter plant.
Thanks,
Ravi. -
It started when my macbook froze while I had a video open, I turend it off by the switch and it's not been loading since then.The only thing that seems to be different on my windows acount is that I can't use the wifi from my room. Which is the first time I've had this problem since my interent's pretty deacent. I tried to reset the "PRAM" and "NVRAM" and it didn't work. I couldn't seem to open it in safe mode,and when I tried to manually put in a command it froze and I wasn't able to type in a command.
Hi LocPLe, and a warm welcome to the forums!
Hmm, try these steps...
Resetting MacBook and MacBook Pro System Management Controller (SMC)...
http://docs.info.apple.com/article.html?artnum=303319
Try holding the Option key, or Space Bar down for a boot up.
"Try Disk Utility
1. Insert the Mac OS X Install disc that came with your computer, then restart the computer while holding the C key.
2. When your computer finishes starting up from the disc, choose Disk Utility from the Installer menu. (In Mac OS X 10.4 or later, you must select your language first.)
*Important: Do not click Continue in the first screen of the Installer. If you do, you must restart from the disc again to access Disk Utility.*
3. Click the First Aid tab.
4. Click the disclosure triangle to the left of the hard drive icon to display the names of your hard disk volumes and partitions.
5. Select your Mac OS X volume.
6. Click Repair. Disk Utility checks and repairs the disk."
http://docs.info.apple.com/article.html?artnum=106214
Then try a Safe Boot, (holding Shift key down at bootup), run Disk Utility in Applications>Utilities, then highlight your drive, click on Repair Permissions, reboot when it completes. -
Does anyone know how to list/create/delete/modify virtual service accounts? It seems like MS is now intent on creating entities capable of logging into my system but I have no way of listing or editing them! Any help is much appreciated.
-- MobyBelow is an interesting comparison between managed service accounts and virtual accounts: http://social.technet.microsoft.com/wiki/contents/articles/391.managed-service-accounts-msas-versus-virtual-accounts-in-windows-server-2008-r2.aspx
See also that: http://windowsitpro.com/systems-management/q-whats-virtual-account
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password -
RPC Server is unavailable / account is not valid during setup
Hey all,
Working with a brand new environment. During install (both SQL 2012 and 2014) on any one of four servers, they all fail on the service accounts page with a "RPC server is unavailable" error and "The SQL Server service account login or password
is not valid."
I've verified that RPC server is unavailable is related to only the agent, and the account invalid is only for the engine. Verified this by trying each one separately and putting the other back to default. For the latter (account login or password is not valid),
that's definitely not accurate being that I can use that account & password successfully elsewhere.
The best article I've found so far is here - http://sqlwithmanoj.com/tag/the-rpc-server-is-unavailable/.
I've verified all 5 are in place and changed the group policy. Still errors out every time. Even if I can fix the RPC issue, not sure what's wrong with the engine account? I think both issues still stem back to the RPC, even though the engine doesn't report
it in the setup. In the detail log, I'm assuming "Slp: Sco.User.OpenRoot - root DirectoryEntry object already opened for this computer for this object" is the core of my problem.
Here's a full output of a failed run:
(08) 2015-04-27 18:28:19 Slp: Sco: Attempting to determine if the password is required for account 'MyDomain\svcSQLEngine'
(08) 2015-04-27 18:28:19 Slp: Sco: Attempting to determine if the account 'MyDomain\svcSQLEngine' is Virtual Account
(08) 2015-04-27 18:28:19 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLEngine
(08) 2015-04-27 18:28:19 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLEngine
(08) 2015-04-27 18:28:19 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLEngine parameter to MyDomain\svcSQLEngine
(08) 2015-04-27 18:28:19 Slp: Sco: Attempting to determine if the account 'MyDomain\svcSQLEngine' is Managed Service Account
(08) 2015-04-27 18:28:25 Slp: Sco: Attempting to determine if the password is required for account 'MyDomain\svcSQLAgent'
(08) 2015-04-27 18:28:25 Slp: Sco: Attempting to determine if the account 'MyDomain\svcSQLAgent' is Virtual Account
(08) 2015-04-27 18:28:25 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLAgent
(08) 2015-04-27 18:28:25 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLAgent
(08) 2015-04-27 18:28:25 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLAgent parameter to MyDomain\svcSQLAgent
(08) 2015-04-27 18:28:25 Slp: Sco: Failed when querying buffer size
(08) 2015-04-27 18:28:25 Slp: Sco: Attempting to determine if the account 'MyDomain\svcSQLAgent' is Managed Service Account
(03) 2015-04-27 18:28:27 ACE: Normalizing user input on public configuration object.
(03) 2015-04-27 18:28:27 ACE: Formatting user name 'MyDomain\svcSQLAgent'
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLAgent
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLAgent
(03) 2015-04-27 18:28:27 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLAgent parameter to MyDomain\svcSQLAgent
(03) 2015-04-27 18:28:27 Slp: Sco: Failed when querying buffer size
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to get account sid for user account MyDomain
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to get sid for user account MyDomain
(03) 2015-04-27 18:28:27 Slp: Sco: GetSidForAccount normalized accountName MyDomain parameter to MyDomain
(03) 2015-04-27 18:28:27 ACE: Formatted user name is 'MyDomain\svcSQLAgent'
(03) 2015-04-27 18:28:27 ACE: Can't get InstanceName, fall back to INSTANCENAME input setting value
(03) 2015-04-27 18:28:27 ACE: Got instanceName=MSSQLSERVER
(03) 2015-04-27 18:28:27 ACE: ValidateUserNameAndPassword started with userName = 'MyDomain\svcSQLAgent', userNameRequired = 'True', isCluster = 'False'
(03) 2015-04-27 18:28:27 ACE: Validating username 'MyDomain\svcSQLAgent' and password '***'
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to validate credentials for user account 'MyDomain\svcSQLAgent' and service name 'SQLSERVERAGENT'
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to determine if the account 'MyDomain\svcSQLAgent' is Virtual Account
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLAgent
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLAgent
(03) 2015-04-27 18:28:27 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLAgent parameter to MyDomain\svcSQLAgent
(03) 2015-04-27 18:28:27 Slp: Sco: Failed when querying buffer size
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to see if user MyDomain\svcSQLAgent exists
(03) 2015-04-27 18:28:27 Slp: Sco.User.OpenRoot - root DirectoryEntry object already opened for this computer for this object
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to check if user account MyDomain\svcSQLAgent exists
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to look up AD entry for user MyDomain\svcSQLAgent
(03) 2015-04-27 18:28:27 Slp: Sco.User.OpenRoot - root DirectoryEntry object already opened for this computer for this object
(03) 2015-04-27 18:28:27 Slp: Sco.User.LookupADEntry - Attempting to find user account MyDomain\svcSQLAgent
(03) 2015-04-27 18:28:27 Slp: Sco: Attempting to check if container 'WinNT://MyDomain' of user account exists
(03) 2015-04-27 18:28:29 ACE: The credentials you provided for the SQL Server Agent service are invalid. To continue, provide a valid account and password for the SQL Server Agent service.
(03) 2015-04-27 18:28:29 SQLBrowser: StartMethod Type='SqlBrowserPublicConfig' Method='ValidateSettings'.
(03) 2015-04-27 18:28:29 SQLBrowser: Validating intended SQL Server Browser service properties. The current intended values are: service account = 'NT AUTHORITY\LOCAL SERVICE', start type = 'Disabled' (source: 'Default').
(03) 2015-04-27 18:28:29 SQLBrowser: StartMethod Type='SqlBrowserPublicConfig' Method='ValidateUserNamePassword'.
(03) 2015-04-27 18:28:29 SQLBrowser: ValidateUserNamePassword: UserName contains its default value of 'NT AUTHORITY\LOCAL SERVICE'. Setting internal property ApplyAccount to 'True'.
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get local service account name
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get NT account from sid S-1-5-19
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account from sid S-1-5-19
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get local service account name
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get NT account from sid S-1-5-19
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account from sid S-1-5-19
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account NT AUTHORITY\LOCAL SERVICE
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account NT AUTHORITY\LOCAL SERVICE
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName NT AUTHORITY\LOCAL SERVICE parameter to NT AUTHORITY\LOCAL SERVICE
(03) 2015-04-27 18:28:29 SQLBrowser: EndMethod Type='SqlBrowserPublicConfig' Method='ValidateUserNamePassword'.
(03) 2015-04-27 18:28:29 SQLBrowser: StartMethod Type='SqlBrowserPublicConfig' Method='ValidateStartMode'.
(03) 2015-04-27 18:28:29 SQLBrowser: EndMethod Type='SqlBrowserPublicConfig' Method='ValidateStartMode'.
(03) 2015-04-27 18:28:29 SQLBrowser: EndMethod Type='SqlBrowserPublicConfig' Method='ValidateSettings'.
(03) 2015-04-27 18:28:29 SQLEngine: : Action Scenario: Install, Feature Scenario: Install, Resolved Scenario Install
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLEngine parameter to MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account MyDomain
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account MyDomain
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName MyDomain parameter to MyDomain
(03) 2015-04-27 18:28:29 SQLEngine: --EffectiveProperties: Dumping Effective Properties for new instance.
(03) 2015-04-27 18:28:29 SQLEngine: --EffectiveProperties:
InstanceId = MSSQL11.MSSQLSERVER
(03) 2015-04-27 18:28:29 SQLEngine: --EffectiveProperties:
InstanceName = MSSQLSERVER
(03) 2015-04-27 18:28:29 SQLEngine: --EffectiveProperties:
IsDefaultInstance = True
(03) 2015-04-27 18:28:29 SQLEngine: --EffectiveProperties:
SqlServerServiceName = MSSQLSERVER
(03) 2015-04-27 18:28:29 SQLEngine: --EffectiveProperties:
IsExpressSku = False
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: Dumping Install Properties
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: EnableRanu = False
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: SecurityMode =
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: LoginMode = 1
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: SqlCollation = SQL_Latin1_General_CP1_CI_AS
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: SqlAdminAcounts =
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: SqlServiceStartupType = Automatic
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: SqlAccount = MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 SQLEngine: --InstallProperties: AddCurrentUserAsSQLAdmin = False
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: Dumping Directory Propreties
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: DataRootDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: SystemDataDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: InstallSqlInstanceDir = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: DefaultDataDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: DefaultLogDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: BackupDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Backup
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: TempDbDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: TempDbLogDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: ErrorLogDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Log
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: TemplateDataDirectory = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Template Data
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: SqlInstanceBinnDir = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: SqlInstanceTemplatesDir = C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\Templates
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: MasterDbPath =
(03) 2015-04-27 18:28:29 SQLEngine: --PublicBasedDirectoryProperties: MasterLogPath =
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: --- Validating Engine Settings ---
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Engine: Validating StartMode
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Engine: Validating FileStreamLevel : FILESTREAMLEVEL is 0
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Engine: Validating FileStreamSharename : No sharename specified
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Engine: Validating EnableRanu
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Validating SqlCollation
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: SqlCollation = SQL_Latin1_General_CP1_CI_AS
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: SqlCollation 'SQL_Latin1_General_CP1_CI_AS' is valid.
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Engine : Validating Service Account
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: SQLEngine : Validating Engine Service Account
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to determine if the account 'MyDomain\svcSQLEngine' is Virtual Account
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to determine if the account 'MyDomain\svcSQLEngine' is Managed Service Account
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Engine : Attempting to get account sid for account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLEngine parameter to MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account from sid S-1-5-21-2005767751-3441520766-2436301181-2505
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to initialize user group MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account MyDomain
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account MyDomain
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName MyDomain parameter to MyDomain
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to check if user group svcSQLEngine exists
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to open root DirectoryEntry object for domain/computer 'MyDomain'
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to check if container 'WinNT://MyDomain' of group exists
(03) 2015-04-27 18:28:29 Slp: Sco: User group svcSQLEngine doesn't exist
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLEngine parameter to MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLEngine parameter to MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account MyDomain
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account MyDomain
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName MyDomain parameter to MyDomain
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Engine : Service Acccount Specified, Validating Password
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to validate credentials for user account 'MyDomain\svcSQLEngine' and service name 'MSSQLSERVER'
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to determine if the account 'MyDomain\svcSQLEngine' is Virtual Account
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get account sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to get sid for user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: GetSidForAccount normalized accountName MyDomain\svcSQLEngine parameter to MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to see if user MyDomain\svcSQLEngine exists
(03) 2015-04-27 18:28:29 Slp: Sco.User.OpenRoot - root DirectoryEntry object already opened for this computer for this object
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to check if user account MyDomain\svcSQLEngine exists
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to look up AD entry for user MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco.User.OpenRoot - root DirectoryEntry object already opened for this computer for this object
(03) 2015-04-27 18:28:29 Slp: Sco.User.LookupADEntry - Attempting to find user account MyDomain\svcSQLEngine
(03) 2015-04-27 18:28:29 Slp: Sco: Attempting to check if container 'WinNT://MyDomain' of user account exists
(03) 2015-04-27 18:28:29 SQLEngine: --InputValidator: Engine: Validation for account MyDomain\svcSQLEngine failed. The RPC server is unavailable.
Never seen this before, any suggestions?
ThanksHi Adam,
The credentials you provided for the SQL Server Agent service are invalid. To continue, provide a valid account and password for the SQL Server Agent service.
Could you please use the default services account configuration during the SQL Server setup and update services account after installation is completed?
In addition, based on my research, the above error could occurr when the machine you install SQL Server is joined to domain A, however, the user account you used to install SQL Server is created in domain B.
If that is the case in your scenario, you can create another account in domain A, then install SQL Server. Also please make sure that the account you used to install SQL Server has admin permissions. For more details, please review this similar
blog.
Thanks,
Lydia Zhang
If you have any feedback on our support, please click
here.
Lydia Zhang
TechNet Community Support -
How do you create a new account for a family member?
My daughter and I both have Ipods, and want to setup SEPARATE accounts. Itunes 7 worked great, but now when we 'upgraded' to 8, it MERGED all our files. So I thought I had a separate account, but it turns out when I load a new song, it goes into HER Itunes files. She deleted all my info, and I REALLY want a separate account (that sticks).
My songs are still in my directory under "Mikes Itunes", but when I reloaded them into what I thought was a fresh entry, it turns out it went into my daughter's Itunes file too! What is up with Itunes 8? and how can you create a TRUE separate account so I have control over MY songs!?First, let's make it easier to swap between accounts. In the Accounts pane of System Preferences click on the Login Options (after unlocking the pane). Enable fast user switching. This will put a new menu in the top right of the screen. You can then swap to the other account without having to log out of the current one.
Log into the original account. Select the folder you want access from the other account and choose Get Info from the file menu. There is a section called Sharing & Permissions. You will need to click on the padlock to make changes. Click on the + to add permissions for the other user account by selecting the user account from list that appears. Set the permission for that account to read only. Once you have it listed then choose the "Apply to enclosed items" from the gear menu below the list. This should give you access from the other account to that folder and any folders contained in it.
For iTunes you will want to do this to the Music folder, giving you access to the files below. From within iTunes you can select Add to Library from the file menu, and then select the music from the other account to that account's iTunes library. Once you have set up the new library whoever's library is the original can clean up the library to remove any music they don't want (now that it's in the new account). -
Service Accounts for Reporting Service in SQL Server Failover Cluster setup
I am setting up 2 Report Services (SSRS) in SQL Failover Clustering (Version: 2012SP1) on Windows 2012, as part of scale out architecture.
There are 2 options to configure the service account for SSRS:
Option 1) Using domain accounts, as what I have done for DB Engine and SQL Agent.
Option 2) accept the default, which is virtual account for SSRS. Per documentation URL:
http://msdn.microsoft.com/en-us/library/ms143504.aspx
which is the recommended one? is it option 2?
There is security note on above URL as well, but does not clearly mention that option 1 is not recommended.
Security Note: Always run SQL Server services by using the lowest possible user rights. Use a MSA or virtual account when possible. When MSA and virtual accounts are not possible, use a specific low-privilege user account or domain account instead
of a shared account for SQL Server services. Use separate accounts for different SQL Server services. Do not grant additional permissions to the SQL Server service account or the service groups. Permissions will be granted through group membership or granted
directly to a service SID, where a service SID is supported.
Thanks very much for your help!Hi Luo Donghua,
In SQL Server Failover Cluster Instance, personally two options can run well. If you use the virtual account for SQL Server Reporting Service. Virtual accounts in Windows Server 2008 R2 and Windows 7 are managed local accounts that provide the features to
simplify service administration. The virtual account is auto-managed, and the virtual account can access the network in a domain environment.
Of cause, you can also use domain accounts in your clustering.
Just make sure your service account is set up here, or that it is using a proper built-in account.For more information, see:http://ermahblerg.com/2012/11/08/cluster-ssrs-in-2008/
Thanks,
Sofiya Li
Sofiya Li
TechNet Community Support -
How to change password "Sharing Accounts"
How to change passwords of Sharing Accounts especially when they wre created in the File Sharing of the Preference panel. They are not account comunig from the Address book but were just created a virtual account for genric sharing. Easy to set up, esay to create a passwaord BUT HOW TO CHANGE IT or reset it ?
Try http://www.microsoft.com/mac/search.mspx?qu=active+directory and the appropriate server forums.
-
Changing Reporting Services Account via SMO
I am in the process of changing our Service Accounts to use virtual accounts in place of using local accounts. I am using SMO to change the SQL Server, SQL Server Agent and Analysis Services accounts to the virtual account and works great. Question
I have, can the Reporting Services account be changed via SMO without disrupting Reporting Services? In the past, an DBA change the reporting services account password without going through Reporting Services Configuration manager, and we lost all of
the data sources for the reports. I was wondering whether or not using SMO will result in the same thing happening or not.
Thanks.
DJI've not tried this on SSRS but the below link talks about your problem. I would recommend you to have rollback plan in case of any issues. Try this on less critical servers.
http://www.the-fays.net/blog/?tag=powershell
--Prashanth -
SSAS issue with Domain user account
Hi
I have SSAS 2008 R2 set up running on Windows Server 2012 Standard.
The server is registered as a part of domain.
I have had an issue of domain user accounts accessing to a cube and it's starting to get worse. There has been no problem with a local user account (I set up a few for testing purpose).
I ran the role report from BIDS Helper and it finds all the domain user accounts invalid.
It looks like SSAS is not talking well with the domain server (Windows 2003 server standard) to verify user credentials. But the thing is that everyone is ok with the domain server except for SSAS. IT does not have a clue what's going on here and everything
is just pointing at me right now.
I'd like to know if there is anyway to monitor that communication between SSAS and domain server for user credential verification and any guideline on how to resolve it. Most of time, it just works again.. like 10 minitues later.. it resolves by itself.
But this time, not!!!
All I know is that 1. Registering the server as a part of domain 2. use domain user account to set the security.
MY IT department has set up network monitoring tool and says that they are 100% percent working (No connection loss. It's monitoring Active directory as well). The application installed is 'ManageEngine Applications Manager'
I don't know what to do here.
P.S Will it be related something like 'Error
while Add user to SSAS Server - The trust relationship between the primary domain and the trusted domain failed' but it's all the domain accounts including mine are not working.
Cheers!!!First check your DNS servers setting on the server you have SSAS installed. You should only use the IP addresses of the DNS servers (e.g. Domain Controllers) of your domain. Active Directory relies on proper DNS server settings. Adding public DNS servers,
even if they are on the bottom of the list, will mess up name resolving Active Directory names. This should have been done when IT had provisioned the server. Same goes for own workstation if you run your development/management software not on the server.
Second make sure SSAS is running under a service account that has access to Active Directory. This can be either a domain account, the local system account, or the network service account. Running SSAS under a local account or the local service account will
not work because local accounts do not have access to Active Directory. Running SSAS under either a Managed Service Account or a Virtual Account will not work because those features require the domain at least the Windows Server 2008 R2 functional
level.
Third make sure the account you use to log on to SSAS is a domain account and has appropriate permissions in SQL Server and SSAS. Local accounts and SQL Server account do not have access to Active Directory
Maybe you are looking for
-
My husband got a new ipad and set up his own apple id without looking into the implications of that. Now I want to sync this ipad with our itunes so we can access it on here, but our itunes has a different apple id. Any way to do this?
-
I made purchases on i books on my iphone 4 but it broke before i got a chance to back it up have since gotten a new phone but half the books are missing. i have spent well over $100 on books and am quite baffled as to how i can rectify this problem,
-
Nokia n9 phone keeps blinking after hard reset (cl...
i don't have many things in my phone (excluding the pre-installed stuff). 10 minutes later, my phone will start blinking. it wont let me turn off the phone either. whats happening? Solved! Go to Solution.
-
When I go on Google Images and find an image that I want to save to my Camera Roll, I can't save it how I used to. I used to be able to just hold down the image and have the Save Image option pop up along with 2 or 3 other options, but now the Save I
-
hi, the following code works just fine with JDKS 1.1, 1.2 and 1.3, but doesn't work under 1.4. can someone tell me what's wrong with it? import java.awt.*; public class AwtTest public static void main( String[] args ) Window f = new Window( new Frame