Showing posts with label domain. Show all posts
Showing posts with label domain. Show all posts

Friday, March 9, 2012

Method to check the connection status of any Machine on Network

Hello All:
I need to know the connection status of any machine on domain i.e. I want to
check that whether the machine is on or off(alive/dead).
If anyone can tell then I shall be highly grateful
Sincerely,
Adnan KudiyaHi
Try sp_who 'active'
"adnankudiya" <adnankudiya.1nq9tv@.mail.codecomments.com> wrote in message
news:adnankudiya.1nq9tv@.mail.codecomments.com...
> Hello All:
> I need to know the connection status of any machine on domain i.e. I
> want to check that whether the machine is on or off(alive/dead).
> If anyone can tell then I shall be highly grateful
> Sincerely,
> Adnan Kudiya
>
> --
> adnankudiya
> ---
> Posted via http://www.codecomments.com
> ---
>|||Hi
I assume you mean database connection status and not just something like
pinging the client periodically to see if you get a reply? This may be
difficult as you can gather information about when a connection last did
something sysprocesses, but you don't know if they are connected or have
died. If your application has a set timeout and any activity has not happene
d
in that time, I guess you can assume they are dead.
John
"adnankudiya" wrote:

> Hello All:
> I need to know the connection status of any machine on domain i.e. I
> want to check that whether the machine is on or off(alive/dead).
> If anyone can tell then I shall be highly grateful
> Sincerely,
> Adnan Kudiya
>
> --
> adnankudiya
> ---
> Posted via http://www.codecomments.com
> ---
>|||I thought about this a while back and did not come up with a good solution.
One idea was to write a stored procedure - sp_ping and execute that on the
connection:
create proc sp_ping
as
return 0
go
or something trivial and similar - EG
SELECT DateNow = GetDate()
You could run that SP with a timeout that is quite low say 2 seconds.
- Tim
BTW: I do realise sp_ is not a good prefix.
"John Bell" <JohnBell@.discussions.microsoft.com> wrote in message
news:F32C6F92-2896-4F96-9FC5-49D846A434FF@.microsoft.com...
> Hi
> I assume you mean database connection status and not just something like
> pinging the client periodically to see if you get a reply? This may be
> difficult as you can gather information about when a connection last did
> something sysprocesses, but you don't know if they are connected or have
> died. If your application has a set timeout and any activity has not
> happened
> in that time, I guess you can assume they are dead.
> John
> "adnankudiya" wrote:
>

Wednesday, March 7, 2012

Metadata Issues

I am experiencing something really bazaar. The package I created usign SQL2K5 Sept. CTP Builds and functions just fine in one domain. When I deployed to another machine & new domain, we get Metadata errors within dataflow that was modified. We had encountered this earlier but by rebuilding the package it has solved the problem. This time, rebuild is not helping. How can metadata for data flow of a package get corrupted from one environment to another. Also, what's the purpose of building a package when the package is in XML (Text). I don't see any binary code for script tasks.

What exactly is the message? My favourite at present when moving between environments is the encyrption error for passwords (or any sensitive propertry), since the default protection uses the user key, so obviously changing domains changes accounts and therefore the decyption fails. Setting don't save sensitive information and use configurations to apply passwords again helps somewhat.|||Thanks for your reply Darren. I have already cross the hurdle of Package Protection level issue. Current settings are "Don't save sensitive" info. I am curious to see if they modify this default setting in RTM rel.
|||Using the RTM release now available to MSDN subscribers, the default is User Key still.|||Great!!. By the way, what does a Build functionality do for a package when script tasks within either control flow or data flow are set not to compile on save. If I don't build the package, it still works so why build it?
|||

Scripts can be compiled or not. If compiled then they run faster since there is no compilation overhead each time the package is run. I wasn't aware that this was linked to the package build, I assumed it happened within the script editor itself and VSA. Only downside of pre-compiled scripts is they are processor specific, so x86 to x64 deployments for example will fail.

|||You'd be better of ignoring me and just reading Books Online. The package Save induces the compilation.

From ScriptTask.PreCompile

Property Value

true if the VSA script is compiled when the package is saved; otherwise, false. The default value is true.

Remarks

VSA scripts must be compiled before the package runs. The Script task includes the option to pre-compile script into binary code when the package is saved. When script is precompiled, the language engine is not loaded at run time and the package runs more quickly; however, compiled binary files consume significant disk space. Script that is not precompiled is compiled at run time, which slows package execution but consumes less disk space. When storing large packages is not a problem, you should pre-compile your VSA scripts.

|||

DarrenSQLIS wrote:

Only downside of pre-compiled scripts is they are processor specific, so x86 to x64 deployments for example will fail.


Not really. The script is precompiled to MSIL (.NET intemediary language) which is platform-independent. It will be JIT-ed to process-specific code at runtime.

Monday, February 20, 2012

message in sql server error log

What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' " every
20 sec? the instance is Standard SQL server 2000 with mixed security mode
and sql server service accout is domain admin member. The application that
use database is working fine but out error log fills up very fast. I will
appreciate any advise.
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
> every
> 20 sec? the instance is Standard SQL server 2000 with mixed security mode
> and sql server service accout is domain admin member. The application that
> use database is working fine but out error log fills up very fast. I will
> appreciate any advise.
Just a guess here, but that domain account will need to have local admin
permissions on your SQL Server.
In addition, you may need to set the Run As a Service permission, or Log On
as a Service.. Something like that. <shrug>
I'm sure others can expand on this.
Rick Sawtell
MCT, MCSD, MCDBA
|||Is this showing up in sql errorlog or system log ?
Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote computer
?
How did you set the service account user names ?
Have you thought about setting and audit (Remember SQL Can do C2), and
watching realtime with profiler ?
Is this computer a domain contoler and/r any FSMO Role
BTW: It is bad practice to run sql services with admin privilages
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
> every
> 20 sec? the instance is Standard SQL server 2000 with mixed security mode
> and sql server service accout is domain admin member. The application that
> use database is working fine but out error log fills up very fast. I will
> appreciate any advise.
|||"David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
news:ee1GqLtvFHA.3152@.TK2MSFTNGP12.phx.gbl...
> Is this showing up in sql errorlog or system log ?
> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
> computer ?
> How did you set the service account user names ?
> Have you thought about setting and audit (Remember SQL Can do C2), and
> watching realtime with profiler ?
> Is this computer a domain contoler and/r any FSMO Role
> BTW: It is bad practice to run sql services with admin privilages
>
Don't they need local admin rights? It's been a while since I've had to do
a setup like that.
Rick Sawtell
|||"David J. Cartwright" wrote:

> Is this showing up in sql errorlog or system log ?
<EM> In sql error log

> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote computer
> ?
<EM> DOMAIN\COMPUTER$ is for the remote computer.

> How did you set the service account user names ?
<EM> members of domain admin group

> Have you thought about setting and audit (Remember SQL Can do C2), and
> watching realtime with profiler ?
<EM> I did this the message appears when application account
DOMAIN\appaccount is login / logout to sql server. Its not a threat at all so
no sence to use C2

> Is this computer a domain contoler and/r any FSMO Role
<EM> no the computer thats tryng to log is standalone backup server

> BTW: It is bad practice to run sql services with admin privilages
<EM> we are in process of changing this
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
>
>
|||SQL Server only *needs access to its files (system files, and dta
files...usualy C:\Program Files\Microsoft SQL Server..." and its reqistry
keys...
to keep a machine more secure minimize the access that the service account
have
If the service is running with local admin rights...and the sql server is
hacked, then the whole system is comprimised (CmdExec)
"Rick Sawtell" <r_sawtell@.hotmail.com> wrote in message
news:O4X4EVtvFHA.1252@.TK2MSFTNGP09.phx.gbl...
> "David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
> news:ee1GqLtvFHA.3152@.TK2MSFTNGP12.phx.gbl...
> Don't they need local admin rights? It's been a while since I've had to
> do a setup like that.
> Rick Sawtell
>
|||Is the account 'appacccount' loging in from an application on this remote
computer?
The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is when
the computer domain account has gotten out of sync. But i dont know why this
would show up in the sql log...if this is the computer that the appaccount
acount is loging in from and they happen at same time...i would check make
sure that the computers account is in synce...ie thats its p/w has been
set/reset with the domain
did you mean server is a 'member' server or is it realy a 'standolone'
server...?
- David
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...[vbcol=seagreen]
>
> "David J. Cartwright" wrote:
> <EM> In sql error log
> <EM> DOMAIN\COMPUTER$ is for the remote computer.
> <EM> members of domain admin group
> <EM> I did this the message appears when application account
> DOMAIN\appaccount is login / logout to sql server. Its not a threat at all
> so
> no sence to use C2
> <EM> no the computer thats tryng to log is standalone backup server
> <EM> we are in process of changing this
|||thanks David,
please see my answers below
"David J. Cartwright" wrote:

> Is the account 'appacccount' loging in from an application on this remote
> computer?
<EM> yes ...exactly from the same server
> The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is when
> the computer domain account has gotten out of sync. But i dont know why this
> would show up in the sql log...if this is the computer that the appaccount
> acount is loging in from and they happen at same time...i would check make
> sure that the computers account is in synce...ie thats its p/w has been
> set/reset with the domain
<EM>How can I check computer account? pls advise
> did you mean server is a 'member' server or is it realy a 'standolone'
> server...?
>
<EM> its standalone server
> - David
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...
>
>
|||O.K lemmi get this straight...the sql server is a 'standalone' server,
meaning that it is NOT a member of the domain, but it is using domain
accounts (more specificaly, a domain admin account) to run the services ?
also what kinda domain is this NT4/2000/2003 ? and what level is it running
at ? (this will help me answer the computer account prob)
http://support.microsoft.com/default...b;en-us;325850
http://support.microsoft.com/default...b;en-us;260575
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:AB1FE5AD-002B-42A6-B2F7-16DD0E355586@.microsoft.com...[vbcol=seagreen]
> thanks David,
> please see my answers below
> "David J. Cartwright" wrote:
> <EM> yes ...exactly from the same server
> <EM>How can I check computer account? pls advise
> <EM> its standalone server
|||ok ...there is misunderstanding no not that kind of standalone server : ) its
just an application server obviously a domain member
and ...w2000 domain
"David J. Cartwright" wrote:

> O.K lemmi get this straight...the sql server is a 'standalone' server,
> meaning that it is NOT a member of the domain, but it is using domain
> accounts (more specificaly, a domain admin account) to run the services ?
> also what kinda domain is this NT4/2000/2003 ? and what level is it running
> at ? (this will help me answer the computer account prob)
> http://support.microsoft.com/default...b;en-us;325850
> http://support.microsoft.com/default...b;en-us;260575
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:AB1FE5AD-002B-42A6-B2F7-16DD0E355586@.microsoft.com...
>
>

message in sql server error log

What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' " every
20 sec? the instance is Standard SQL server 2000 with mixed security mode
and sql server service accout is domain admin member. The application that
use database is working fine but out error log fills up very fast. I will
appreciate any advise."Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
> every
> 20 sec? the instance is Standard SQL server 2000 with mixed security mode
> and sql server service accout is domain admin member. The application that
> use database is working fine but out error log fills up very fast. I will
> appreciate any advise.
Just a guess here, but that domain account will need to have local admin
permissions on your SQL Server.
In addition, you may need to set the Run As a Service permission, or Log On
as a Service.. Something like that. <shrug>
I'm sure others can expand on this.
Rick Sawtell
MCT, MCSD, MCDBA|||Is this showing up in sql errorlog or system log ?
Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote computer
?
How did you set the service account user names ?
Have you thought about setting and audit (Remember SQL Can do C2), and
watching realtime with profiler ?
Is this computer a domain contoler and/r any FSMO Role
BTW: It is bad practice to run sql services with admin privilages
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
> every
> 20 sec? the instance is Standard SQL server 2000 with mixed security mode
> and sql server service accout is domain admin member. The application that
> use database is working fine but out error log fills up very fast. I will
> appreciate any advise.|||"David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
news:ee1GqLtvFHA.3152@.TK2MSFTNGP12.phx.gbl...
> Is this showing up in sql errorlog or system log ?
> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
> computer ?
> How did you set the service account user names ?
> Have you thought about setting and audit (Remember SQL Can do C2), and
> watching realtime with profiler ?
> Is this computer a domain contoler and/r any FSMO Role
> BTW: It is bad practice to run sql services with admin privilages
>
Don't they need local admin rights? It's been a while since I've had to do
a setup like that.
Rick Sawtell|||"David J. Cartwright" wrote:
> Is this showing up in sql errorlog or system log ?
<EM> In sql error log
> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote computer
> ?
<EM> DOMAIN\COMPUTER$ is for the remote computer.
> How did you set the service account user names ?
<EM> members of domain admin group
> Have you thought about setting and audit (Remember SQL Can do C2), and
> watching realtime with profiler ?
<EM> I did this the message appears when application account
DOMAIN\appaccount is login / logout to sql server. Its not a threat at all so
no sence to use C2
> Is this computer a domain contoler and/r any FSMO Role
<EM> no the computer thats tryng to log is standalone backup server
> BTW: It is bad practice to run sql services with admin privilages
<EM> we are in process of changing this
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> > What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
> > every
> > 20 sec? the instance is Standard SQL server 2000 with mixed security mode
> > and sql server service accout is domain admin member. The application that
> > use database is working fine but out error log fills up very fast. I will
> > appreciate any advise.
>
>|||SQL Server only *needs access to its files (system files, and dta
files...usualy C:\Program Files\Microsoft SQL Server..." and its reqistry
keys...
to keep a machine more secure minimize the access that the service account
have
If the service is running with local admin rights...and the sql server is
hacked, then the whole system is comprimised (CmdExec)
"Rick Sawtell" <r_sawtell@.hotmail.com> wrote in message
news:O4X4EVtvFHA.1252@.TK2MSFTNGP09.phx.gbl...
> "David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
> news:ee1GqLtvFHA.3152@.TK2MSFTNGP12.phx.gbl...
>> Is this showing up in sql errorlog or system log ?
>> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
>> computer ?
>> How did you set the service account user names ?
>> Have you thought about setting and audit (Remember SQL Can do C2), and
>> watching realtime with profiler ?
>> Is this computer a domain contoler and/r any FSMO Role
>> BTW: It is bad practice to run sql services with admin privilages
>>
> Don't they need local admin rights? It's been a while since I've had to
> do a setup like that.
> Rick Sawtell
>|||Is the account 'appacccount' loging in from an application on this remote
computer?
The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is when
the computer domain account has gotten out of sync. But i dont know why this
would show up in the sql log...if this is the computer that the appaccount
acount is loging in from and they happen at same time...i would check make
sure that the computers account is in synce...ie thats its p/w has been
set/reset with the domain
did you mean server is a 'member' server or is it realy a 'standolone'
server...?
- David
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...
>
> "David J. Cartwright" wrote:
>> Is this showing up in sql errorlog or system log ?
> <EM> In sql error log
>> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
>> computer
>> ?
> <EM> DOMAIN\COMPUTER$ is for the remote computer.
>> How did you set the service account user names ?
> <EM> members of domain admin group
>> Have you thought about setting and audit (Remember SQL Can do C2), and
>> watching realtime with profiler ?
> <EM> I did this the message appears when application account
> DOMAIN\appaccount is login / logout to sql server. Its not a threat at all
> so
> no sence to use C2
>> Is this computer a domain contoler and/r any FSMO Role
> <EM> no the computer thats tryng to log is standalone backup server
>> BTW: It is bad practice to run sql services with admin privilages
> <EM> we are in process of changing this
>> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
>> news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
>> > What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
>> > every
>> > 20 sec? the instance is Standard SQL server 2000 with mixed security
>> > mode
>> > and sql server service accout is domain admin member. The application
>> > that
>> > use database is working fine but out error log fills up very fast. I
>> > will
>> > appreciate any advise.
>>|||thanks David,
please see my answers below
"David J. Cartwright" wrote:
> Is the account 'appacccount' loging in from an application on this remote
> computer?
<EM> yes ...exactly from the same server
> The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is when
> the computer domain account has gotten out of sync. But i dont know why this
> would show up in the sql log...if this is the computer that the appaccount
> acount is loging in from and they happen at same time...i would check make
> sure that the computers account is in synce...ie thats its p/w has been
> set/reset with the domain
<EM>How can I check computer account? pls advise
> did you mean server is a 'member' server or is it realy a 'standolone'
> server...?
>
<EM> its standalone server
> - David
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...
> >
> >
> > "David J. Cartwright" wrote:
> >
> >> Is this showing up in sql errorlog or system log ?
> > <EM> In sql error log
> >
> >> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
> >> computer
> >> ?
> > <EM> DOMAIN\COMPUTER$ is for the remote computer.
> >
> >> How did you set the service account user names ?
> > <EM> members of domain admin group
> >
> >> Have you thought about setting and audit (Remember SQL Can do C2), and
> >> watching realtime with profiler ?
> > <EM> I did this the message appears when application account
> > DOMAIN\appaccount is login / logout to sql server. Its not a threat at all
> > so
> > no sence to use C2
> >
> >> Is this computer a domain contoler and/r any FSMO Role
> > <EM> no the computer thats tryng to log is standalone backup server
> >
> >> BTW: It is bad practice to run sql services with admin privilages
> > <EM> we are in process of changing this
> >>
> >> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> >> news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> >> > What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
> >> > every
> >> > 20 sec? the instance is Standard SQL server 2000 with mixed security
> >> > mode
> >> > and sql server service accout is domain admin member. The application
> >> > that
> >> > use database is working fine but out error log fills up very fast. I
> >> > will
> >> > appreciate any advise.
> >>
> >>
> >>
>
>|||O.K lemmi get this straight...the sql server is a 'standalone' server,
meaning that it is NOT a member of the domain, but it is using domain
accounts (more specificaly, a domain admin account) to run the services '
also what kinda domain is this NT4/2000/2003 ? and what level is it running
at ? (this will help me answer the computer account prob)
---
http://support.microsoft.com/default.aspx?scid=kb;en-us;325850
http://support.microsoft.com/default.aspx?scid=kb;en-us;260575
---
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:AB1FE5AD-002B-42A6-B2F7-16DD0E355586@.microsoft.com...
> thanks David,
> please see my answers below
> "David J. Cartwright" wrote:
>> Is the account 'appacccount' loging in from an application on this remote
>> computer?
> <EM> yes ...exactly from the same server
>> The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is
>> when
>> the computer domain account has gotten out of sync. But i dont know why
>> this
>> would show up in the sql log...if this is the computer that the
>> appaccount
>> acount is loging in from and they happen at same time...i would check
>> make
>> sure that the computers account is in synce...ie thats its p/w has been
>> set/reset with the domain
> <EM>How can I check computer account? pls advise
>> did you mean server is a 'member' server or is it realy a 'standolone'
>> server...?
> <EM> its standalone server
>> - David
>> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
>> news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...
>> >
>> >
>> > "David J. Cartwright" wrote:
>> >
>> >> Is this showing up in sql errorlog or system log ?
>> > <EM> In sql error log
>> >
>> >> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
>> >> computer
>> >> ?
>> > <EM> DOMAIN\COMPUTER$ is for the remote computer.
>> >
>> >> How did you set the service account user names ?
>> > <EM> members of domain admin group
>> >
>> >> Have you thought about setting and audit (Remember SQL Can do C2), and
>> >> watching realtime with profiler ?
>> > <EM> I did this the message appears when application account
>> > DOMAIN\appaccount is login / logout to sql server. Its not a threat at
>> > all
>> > so
>> > no sence to use C2
>> >
>> >> Is this computer a domain contoler and/r any FSMO Role
>> > <EM> no the computer thats tryng to log is standalone backup server
>> >
>> >> BTW: It is bad practice to run sql services with admin privilages
>> > <EM> we are in process of changing this
>> >>
>> >> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
>> >> news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
>> >> > What can cause the message "Login failed for user 'DOMAIN\COMPUTER$'
>> >> > "
>> >> > every
>> >> > 20 sec? the instance is Standard SQL server 2000 with mixed
>> >> > security
>> >> > mode
>> >> > and sql server service accout is domain admin member. The
>> >> > application
>> >> > that
>> >> > use database is working fine but out error log fills up very fast. I
>> >> > will
>> >> > appreciate any advise.
>> >>
>> >>
>> >>
>>|||ok ...there is misunderstanding no not that kind of standalone server : ) its
just an application server obviously a domain member
and ...w2000 domain
"David J. Cartwright" wrote:
> O.K lemmi get this straight...the sql server is a 'standalone' server,
> meaning that it is NOT a member of the domain, but it is using domain
> accounts (more specificaly, a domain admin account) to run the services '
> also what kinda domain is this NT4/2000/2003 ? and what level is it running
> at ? (this will help me answer the computer account prob)
> ---
> http://support.microsoft.com/default.aspx?scid=kb;en-us;325850
> http://support.microsoft.com/default.aspx?scid=kb;en-us;260575
> ---
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:AB1FE5AD-002B-42A6-B2F7-16DD0E355586@.microsoft.com...
> >
> > thanks David,
> >
> > please see my answers below
> > "David J. Cartwright" wrote:
> >
> >> Is the account 'appacccount' loging in from an application on this remote
> >> computer?
> > <EM> yes ...exactly from the same server
> >> The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is
> >> when
> >> the computer domain account has gotten out of sync. But i dont know why
> >> this
> >> would show up in the sql log...if this is the computer that the
> >> appaccount
> >> acount is loging in from and they happen at same time...i would check
> >> make
> >> sure that the computers account is in synce...ie thats its p/w has been
> >> set/reset with the domain
> > <EM>How can I check computer account? pls advise
> >> did you mean server is a 'member' server or is it realy a 'standolone'
> >> server...?
> >>
> > <EM> its standalone server
> >> - David
> >>
> >> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> >> news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...
> >> >
> >> >
> >> > "David J. Cartwright" wrote:
> >> >
> >> >> Is this showing up in sql errorlog or system log ?
> >> > <EM> In sql error log
> >> >
> >> >> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
> >> >> computer
> >> >> ?
> >> > <EM> DOMAIN\COMPUTER$ is for the remote computer.
> >> >
> >> >> How did you set the service account user names ?
> >> > <EM> members of domain admin group
> >> >
> >> >> Have you thought about setting and audit (Remember SQL Can do C2), and
> >> >> watching realtime with profiler ?
> >> > <EM> I did this the message appears when application account
> >> > DOMAIN\appaccount is login / logout to sql server. Its not a threat at
> >> > all
> >> > so
> >> > no sence to use C2
> >> >
> >> >> Is this computer a domain contoler and/r any FSMO Role
> >> > <EM> no the computer thats tryng to log is standalone backup server
> >> >
> >> >> BTW: It is bad practice to run sql services with admin privilages
> >> > <EM> we are in process of changing this
> >> >>
> >> >> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> >> >> news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> >> >> > What can cause the message "Login failed for user 'DOMAIN\COMPUTER$'
> >> >> > "
> >> >> > every
> >> >> > 20 sec? the instance is Standard SQL server 2000 with mixed
> >> >> > security
> >> >> > mode
> >> >> > and sql server service accout is domain admin member. The
> >> >> > application
> >> >> > that
> >> >> > use database is working fine but out error log fills up very fast. I
> >> >> > will
> >> >> > appreciate any advise.
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>|||I ve created new login for that account 'domain\computer$' and the problem
was fixed
"Eli Milkova" wrote:
> ok ...there is misunderstanding no not that kind of standalone server : ) its
> just an application server obviously a domain member
> and ...w2000 domain
> "David J. Cartwright" wrote:
> > O.K lemmi get this straight...the sql server is a 'standalone' server,
> > meaning that it is NOT a member of the domain, but it is using domain
> > accounts (more specificaly, a domain admin account) to run the services '
> >
> > also what kinda domain is this NT4/2000/2003 ? and what level is it running
> > at ? (this will help me answer the computer account prob)
> > ---
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;325850
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;260575
> > ---
> >
> > "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> > news:AB1FE5AD-002B-42A6-B2F7-16DD0E355586@.microsoft.com...
> > >
> > > thanks David,
> > >
> > > please see my answers below
> > > "David J. Cartwright" wrote:
> > >
> > >> Is the account 'appacccount' loging in from an application on this remote
> > >> computer?
> > > <EM> yes ...exactly from the same server
> > >> The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is
> > >> when
> > >> the computer domain account has gotten out of sync. But i dont know why
> > >> this
> > >> would show up in the sql log...if this is the computer that the
> > >> appaccount
> > >> acount is loging in from and they happen at same time...i would check
> > >> make
> > >> sure that the computers account is in synce...ie thats its p/w has been
> > >> set/reset with the domain
> > > <EM>How can I check computer account? pls advise
> > >> did you mean server is a 'member' server or is it realy a 'standolone'
> > >> server...?
> > >>
> > > <EM> its standalone server
> > >> - David
> > >>
> > >> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> > >> news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...
> > >> >
> > >> >
> > >> > "David J. Cartwright" wrote:
> > >> >
> > >> >> Is this showing up in sql errorlog or system log ?
> > >> > <EM> In sql error log
> > >> >
> > >> >> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
> > >> >> computer
> > >> >> ?
> > >> > <EM> DOMAIN\COMPUTER$ is for the remote computer.
> > >> >
> > >> >> How did you set the service account user names ?
> > >> > <EM> members of domain admin group
> > >> >
> > >> >> Have you thought about setting and audit (Remember SQL Can do C2), and
> > >> >> watching realtime with profiler ?
> > >> > <EM> I did this the message appears when application account
> > >> > DOMAIN\appaccount is login / logout to sql server. Its not a threat at
> > >> > all
> > >> > so
> > >> > no sence to use C2
> > >> >
> > >> >> Is this computer a domain contoler and/r any FSMO Role
> > >> > <EM> no the computer thats tryng to log is standalone backup server
> > >> >
> > >> >> BTW: It is bad practice to run sql services with admin privilages
> > >> > <EM> we are in process of changing this
> > >> >>
> > >> >> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> > >> >> news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> > >> >> > What can cause the message "Login failed for user 'DOMAIN\COMPUTER$'
> > >> >> > "
> > >> >> > every
> > >> >> > 20 sec? the instance is Standard SQL server 2000 with mixed
> > >> >> > security
> > >> >> > mode
> > >> >> > and sql server service accout is domain admin member. The
> > >> >> > application
> > >> >> > that
> > >> >> > use database is working fine but out error log fills up very fast. I
> > >> >> > will
> > >> >> > appreciate any advise.
> > >> >>
> > >> >>
> > >> >>
> > >>
> > >>
> > >>
> >
> >
> >

message in sql server error log

What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' " every
20 sec? the instance is Standard SQL server 2000 with mixed security mode
and sql server service accout is domain admin member. The application that
use database is working fine but out error log fills up very fast. I will
appreciate any advise."Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
> every
> 20 sec? the instance is Standard SQL server 2000 with mixed security mode
> and sql server service accout is domain admin member. The application that
> use database is working fine but out error log fills up very fast. I will
> appreciate any advise.
Just a guess here, but that domain account will need to have local admin
permissions on your SQL Server.
In addition, you may need to set the Run As a Service permission, or Log On
as a Service.. Something like that. <shrug>
I'm sure others can expand on this.
Rick Sawtell
MCT, MCSD, MCDBA|||Is this showing up in sql errorlog or system log ?
Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote computer
?
How did you set the service account user names ?
Have you thought about setting and audit (Remember SQL Can do C2), and
watching realtime with profiler ?
Is this computer a domain contoler and/r any FSMO Role
BTW: It is bad practice to run sql services with admin privilages
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
> What can cause the message "Login failed for user 'DOMAIN\COMPUTER$' "
> every
> 20 sec? the instance is Standard SQL server 2000 with mixed security mode
> and sql server service accout is domain admin member. The application that
> use database is working fine but out error log fills up very fast. I will
> appreciate any advise.|||"David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
news:ee1GqLtvFHA.3152@.TK2MSFTNGP12.phx.gbl...
> Is this showing up in sql errorlog or system log ?
> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote
> computer ?
> How did you set the service account user names ?
> Have you thought about setting and audit (Remember SQL Can do C2), and
> watching realtime with profiler ?
> Is this computer a domain contoler and/r any FSMO Role
> BTW: It is bad practice to run sql services with admin privilages
>
Don't they need local admin rights? It's been a while since I've had to do
a setup like that.
Rick Sawtell|||"David J. Cartwright" wrote:

> Is this showing up in sql errorlog or system log ?
<EM> In sql error log

> Is the COMPUTER in DOMAIN\COMPUTER$ the local computer or a remote compute
r
> ?
<EM> DOMAIN\COMPUTER$ is for the remote computer.

> How did you set the service account user names ?
<EM> members of domain admin group

> Have you thought about setting and audit (Remember SQL Can do C2), and
> watching realtime with profiler ?
<EM> I did this the message appears when application account
DOMAIN\appaccount is login / logout to sql server. Its not a threat at all s
o
no sence to use C2

> Is this computer a domain contoler and/r any FSMO Role
<EM> no the computer thats tryng to log is standalone backup server

> BTW: It is bad practice to run sql services with admin privilages
<EM> we are in process of changing this
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:4A68C8F3-CFAC-4D46-BAD2-B33E7616C53F@.microsoft.com...
>
>|||SQL Server only *needs access to its files (system files, and dta
files...usualy C:\Program Files\Microsoft SQL Server..." and its reqistry
keys...
to keep a machine more secure minimize the access that the service account
have
If the service is running with local admin rights...and the sql server is
hacked, then the whole system is comprimised (CmdExec)
"Rick Sawtell" <r_sawtell@.hotmail.com> wrote in message
news:O4X4EVtvFHA.1252@.TK2MSFTNGP09.phx.gbl...
> "David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
> news:ee1GqLtvFHA.3152@.TK2MSFTNGP12.phx.gbl...
> Don't they need local admin rights? It's been a while since I've had to
> do a setup like that.
> Rick Sawtell
>|||Is the account 'appacccount' loging in from an application on this remote
computer?
The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is when
the computer domain account has gotten out of sync. But i dont know why this
would show up in the sql log...if this is the computer that the appaccount
acount is loging in from and they happen at same time...i would check make
sure that the computers account is in synce...ie thats its p/w has been
set/reset with the domain
did you mean server is a 'member' server or is it realy a 'standolone'
server...?
- David
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...[vbcol=seagreen]
>
> "David J. Cartwright" wrote:
>
> <EM> In sql error log
>
> <EM> DOMAIN\COMPUTER$ is for the remote computer.
>
> <EM> members of domain admin group
>
> <EM> I did this the message appears when application account
> DOMAIN\appaccount is login / logout to sql server. Its not a threat at all
> so
> no sence to use C2
>
> <EM> no the computer thats tryng to log is standalone backup server
>
> <EM> we are in process of changing this|||thanks David,
please see my answers below
"David J. Cartwright" wrote:

> Is the account 'appacccount' loging in from an application on this remote
> computer?
<EM> yes ...exactly from the same server
> The only other time i have seen DOMAIN\COMPUTER$ (With the $ sign) is when
> the computer domain account has gotten out of sync. But i dont know why th
is
> would show up in the sql log...if this is the computer that the appaccoun
t
> acount is loging in from and they happen at same time...i would check mak
e
> sure that the computers account is in synce...ie thats its p/w has been
> set/reset with the domain
<EM>How can I check computer account? pls advise
> did you mean server is a 'member' server or is it realy a 'standolone'
> server...?
>
<EM> its standalone server
> - David
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:30150C5D-30EC-4325-908D-86FB7D52E81B@.microsoft.com...
>
>|||O.K lemmi get this straight...the sql server is a 'standalone' server,
meaning that it is NOT a member of the domain, but it is using domain
accounts (more specificaly, a domain admin account) to run the services '
also what kinda domain is this NT4/2000/2003 ? and what level is it running
at ? (this will help me answer the computer account prob)
---
http://support.microsoft.com/defaul...kb;en-us;325850
http://support.microsoft.com/defaul...kb;en-us;260575
---
"Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
news:AB1FE5AD-002B-42A6-B2F7-16DD0E355586@.microsoft.com...[vbcol=seagreen]
> thanks David,
> please see my answers below
> "David J. Cartwright" wrote:
>
> <EM> yes ...exactly from the same server
> <EM>How can I check computer account? pls advise
> <EM> its standalone server|||ok ...there is misunderstanding no not that kind of standalone server : ) it
s
just an application server obviously a domain member
and ...w2000 domain
"David J. Cartwright" wrote:

> O.K lemmi get this straight...the sql server is a 'standalone' server,
> meaning that it is NOT a member of the domain, but it is using domain
> accounts (more specificaly, a domain admin account) to run the services '
> also what kinda domain is this NT4/2000/2003 ? and what level is it runnin
g
> at ? (this will help me answer the computer account prob)
> ---
> http://support.microsoft.com/defaul...kb;en-us;325850
> http://support.microsoft.com/defaul...kb;en-us;260575
> ---
> "Eli Milkova" <EliMilkova@.discussions.microsoft.com> wrote in message
> news:AB1FE5AD-002B-42A6-B2F7-16DD0E355586@.microsoft.com...
>
>