Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 System Login

Author  Topic 

AskSQLTeam
Ask SQLTeam Question

0 Posts

Posted - 2002-10-23 : 08:09:41
Carl writes "Hi,

I was wondering if anyone knew why im getting the following......

Event Type: Information
Event Source: MSSQLServer
Event Category: Logon
Event ID: 17055
Date: 21/10/2002
Time: 10:00:21
User: N/A
Computer: CNUKDB
Description:
18456 :
Login failed for user 'NT AUTHORITY\SYSTEM'.

Data:
0000: 18 48 00 00 1b 00 00 00 .H......
0008: 07 00 00 00 43 00 4e 00 ....C.N.
0010: 55 00 4b 00 44 00 42 00 U.K.D.B.
0018: 00 00 07 00 00 00 6d 00 ......m.
0020: 61 00 73 00 74 00 65 00 a.s.t.e.
0028: 72 00 00 00 r...

I get this every half an hour. Why would my NT system be trying to login to SQL?

Cheers"

Kevin Snow
Posting Yak Master

149 Posts

Posted - 2002-10-23 : 11:06:13
Are you on a failover cluster? The service account for the Cluster service must have the right to log in to SQL Server so that the SQL Server resource DLL can run the IsAlive query against SQL Server. If it doesn't, you will receive the NT Authority/System failed login error.

Also, some backup programs running on NT4.0 use the NT Authority\System account. That account has to be granted access to SQL Server for the programs to succeed.

If it occurs exactly every 30 minutes, it is probably an automated process. If you are not seeing any failures in SQL that correspond, you may try checking with your networking group (assuming you have one) to see if they have any repeating failures related to automated backups.
Go to Top of Page
   

- Advertisement -