Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
montu
Yak Posting Veteran
60 Posts |
 Posted - 2007-12-05 : 21:50:17
|
| hiat my work place some of the users migrated to another domain even thought with new domain name they can access SQL Server but user who are part of sysadmin(part of some group) on the box unable to execute a job. it means at operating system level newdomain\user credentials are get resolved that's why users are able to access box but why not able to execute jobs. why sysadmin Privilege not get resolved at SQL Server level very confused............ |
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2007-12-05 : 22:28:36
|
| What kind of job? Did you get any error message? |
 |
|
|
montu
Yak Posting Veteran
60 Posts |
Posted - 2007-12-05 : 22:31:57
|
| The job failed. Unable to determine if the owner (NewDomain\User) of job Backup Job for DB Maintenance Plan 'DB Maintanence plan name' has server access (reason: Could not obtain information about Windows NT group/user NewDomain\User'. [SQLSTATE 42000] (Error 8198)). |
|
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2007-12-05 : 22:35:10
|
| Is sql server in new domain? Are new domain and old one trused? |
|
|
|
montu
Yak Posting Veteran
60 Posts |
Posted - 2007-12-05 : 23:11:03
|
| no SQL Server is still on old domain and trusted as well. can some one there suggest me from where i can get some info about how AD and logins are interconnected with each other. |
|
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2007-12-05 : 23:21:36
|
| Quick fix is change job owner. Seems domains are one way trust, that's why can't verify users in new domain. |
|
|
|
montu
Yak Posting Veteran
60 Posts |
Posted - 2007-12-05 : 23:30:01
|
| u r absolutely right(i checked with system admins and they advice me that it is one way trust) quick fix is change job owner to sa but i am not good in authentication concepts can u please suggest me from where i can clear and concise information about AD and SQL logins if u have any idea. |
|
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2007-12-05 : 23:35:46
|
| With trusted login, sql needs to verity account info to domain controller where the account belongs to. But sql server can't do that to untrusted domain because of ad permission. |
|
|
|
|
|
|
how AD affects SQL Server2000/2005