Monday, March 26, 2012

Rights to start/stop a service

We have installed MSDE on 6 work PCs for use in a modeling project.
Since I have admin rights through the domain I did the install.
However, since the MSDE service runs as local system account and the
user who is logging in has no special rights the service won't start.
As a fix I went back and set the service to run as myself
DOMAIN\wawork which at first seemed worked. I would log out and the
modeling user would log in. The first time the SQL Server service
starts up fine. Then when he reboots the PC the next day it will no
longer startup. Not for that user or for me when I log back in as
myself. If I change it back to log on as local system account,
start/stop it, then set it to run as me DOMAIN\wawork it starts
working again. Why I don't know
When it stops working the error is:
The service did not start due to a logon failure.
or
Could not start the MSSQLSERVER service on local computer Error 5:
Access is denied.
So I'm hoping if the user who needs to run the models can be given
access to start/stop services we can leave MSDE set to run as local
system account. Does anyone know what rights need to be set to make
this happen? Our windows administrator can't find a place to give
users that right.
Thanks,
wawork@.hotmail.com
h Randy,
Randy K wrote:
> We have installed MSDE on 6 work PCs for use in a modeling project.
> Since I have admin rights through the domain I did the install.
> However, since the MSDE service runs as local system account and the
> user who is logging in has no special rights the service won't start.
>
> As a fix I went back and set the service to run as myself
> DOMAIN\wawork which at first seemed worked. I would log out and the
> modeling user would log in. The first time the SQL Server service
> starts up fine. Then when he reboots the PC the next day it will no
> longer startup. Not for that user or for me when I log back in as
> myself. If I change it back to log on as local system account,
> start/stop it, then set it to run as me DOMAIN\wawork it starts
> working again. Why I don't know
> When it stops working the error is:
> The service did not start due to a logon failure.
> or
> Could not start the MSSQLSERVER service on local computer Error 5:
> Access is denied.
> So I'm hoping if the user who needs to run the models can be given
> access to start/stop services we can leave MSDE set to run as local
> system account. Does anyone know what rights need to be set to make
> this happen? Our windows administrator can't find a place to give
> users that right.
you can have a look at
http://msdn.microsoft.com/library/de...rview_6k1f.asp
or better http://support.microsoft.com/?id=283811, but sp4 introduced
something new and the SQL Server Agent can no longer start if you deny the
local administrator access to the instance... still investigating about
that..
Andrea Montanari (Microsoft MVP - SQL Server)
http://www.asql.biz/DbaMgr.shtmhttp://italy.mvps.org
DbaMgr2k ver 0.15.0 - DbaMgr ver 0.60.0
(my vb6+sql-dmo little try to provide MS MSDE 1.0 and MSDE 2000 a visual
interface)
-- remove DMO to reply

No comments:

Post a Comment