Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums  SQL Server 2005 Forums  SQL Server Administration (2005)  ANONYMOUS LOGON issue

Author  Topic  Varec Starting Member 2 Posts Posted - 2011-05-31 : 20:16:44 Greetings, We have been troubleshooting this in house for a week now without a good solution. I am entirely stumped on on the problem and now turn to online communities for help. The project is mostly classified so I can't disclose much details, but I'll try to describe the problem as detailed as I can. We recently set up an UAT environment for testing of a new software we have been developing for the past ten years. Our UAT is set up exactly the same as our development environment. We have multiple servers using Windows 2003 Enterprise to host the application, connecting to a single SQL Server 2005 instance. We set up SQL database accounts for each of the application servers, exactly like how we set them up in our development environment, each with db_datareader, db_datawriter and db_owner role memberships. Problem is, every time one of our application servers attempts to login, it assumes ANONYMOUS LOGON suggesting the SQL Server is not recognising the application server, even though they are in the same domain and configured exactly as in our DEV environment. We made some progress a few days ago by changing the network configuration from TCP/IP only to Named Pipes only which seemed to fix our problem, but after a few hours of usage, the memory usage our SQL Server shot up a hundred fold and all SQL operations on our application servers were timing out. We can get everything working by running the application on a domain account, this seems like the only solution right now but our application wasn't designed to run on a domain account so we don't know what problems it may lead to down the track. So my questions are: 1. Why doesn't TCP/IP work? 2. Why is named pipes taking up all that memory? 3. Any other solutions without having to resort to using a domain account? Thanks in Advance!