Tuesday, November 6, 2012

Service Account Permission Issue in Active Directory

Recently I faced an issue with Service account after enabling the service broker for one of the database.

Scenario: As per Client requirement I enabled the service broker for one of the database. After that there was huge Logs generating in SQL error Logs.

Error: The activated proc '[IdentityServerPolicy].[SqlQueryNotificationStoredProcedure-cdad7b08-c759-4d81-b4ef-c583cb6d45ca]' running on queue 'IdentityServerPolicy.SqlQueryNotificationService-cdad7b08-c759-4d81-b4ef-c583cb6d45ca' output the following:  'Could not obtain information about Windows NT group/user XXX\ABC, error code 0x5.'


I tried to run below command to get the details of service account.

Xp_Logininfo 'domain\account name'

But i got below error








Solution: The service account needs "Read permissions"in the active directory.

Open Active directory. Search for the login-> Right Click->Go to the properties->Select Security->Select "Authenticated Users"-> In bottom select "Read Permission" and click on the 'Allow' check box->
Apply->.Ok

After giving the permission I ran the same command and now i got the details about the service account.

No comments:

Post a Comment