Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 SQL 2005 Cluster (Service Account) Removal.

Author  Topic 

MediaPirate
Yak Posting Veteran

52 Posts

Posted - 2008-06-13 : 15:55:43
We have a N+1 SQL 2005 x65 SP2 + 3159 cluster which was running fine until the service account which runs Windows cluster and the SQL services was removed as a login from SQL. This was a new setup so the only SQL accounts are (SA) as SA, Windows Domain GROUP's which one group is configured as SA and the cluster account is added to this group. I cannot start SQL service on the cluster now. I've tried logging into one node as the service account which is member of a AD group which has SA rights to SQL as well as my personal account. If anyone knows a way ot fix this without reinstalling I'd appreciate your help.

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2008-06-13 : 16:01:50
Have you checked Event Viewer for the associated error of the cluster failure?

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-06-14 : 17:24:12
If you see 'nt authority\system' in sysadmin role, try start sql with localsystem account.
Go to Top of Page

TRACEYSQL
Aged Yak Warrior

594 Posts

Posted - 2008-06-14 : 17:34:12
Have a look at this thread
http://blogs.msdn.com/raulga/archive/2007/07/12/disaster-recovery-what-to-do-when-the-sa-account-password-is-lost-in-sql-server-2005.aspx

Go to Top of Page

mdubey
Posting Yak Master

133 Posts

Posted - 2008-06-16 : 09:58:19
Normally SQL svc a/c will not allow you to login either svc a/c have SA access. Cluster svc will also run on Different a/c. Make sure that both SQL and Cluster SVC are added to login and should have SA permission. If not do it and restart the svc's.

Manoj
MCP, MCTS
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-06-21 : 17:17:39
Why cluster service account needs sql sysadmin rights?
Go to Top of Page

chudman2
Starting Member

5 Posts

Posted - 2008-07-08 : 15:16:23
You absolutely must set the permissions of the cluster service so that it is sysadmin within SQL Server. You can get away without doing this only if you currently allow BUILTIN\Admins to remain in the list of sysadmin logins, but that allows for other problems, including unauthorized access by server tech types.

Do not remove BUILTIN\Admins without first adding the cluster service to sysadmins or you will have a frantic day trying to get back into the server, especially if you have enabled login triggers.

The cluster service is what allows SQL to be set up on the cluster, and it must have access to all nodes and SQL Server.
Go to Top of Page

acollins74
Yak Posting Veteran

82 Posts

Posted - 2008-07-08 : 15:32:45
This always works for me...
NT AUTHORITY\SYSTEM - SA
DOMAIN\CLUSTERSERVICE - PUBLIC
BUILTIN\ADMINISTRATOR - DELETE IT
DOMAIN\SQLSERVICE - SA
DOMAIN\SQLSERVICEAGENT - SA
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-07-09 : 22:59:26
So I'm not alone.
Go to Top of Page
   

- Advertisement -