December 2, 2015 at 11:30 am
While installing I got error when it was trying to start the ssis, server agent, full-text, and ssrs services.
the error was error 5: Access is denied.
I had them set to use the ntservice accounts.
I was running the install as a local admin.
I can't start them from sql server config either.
I tried changing the service to run as a AD/sql services account but it still wouldn't start.
December 2, 2015 at 9:51 pm
Examine SQL Server Setup's bootstrap logs. Local admins can successfully deny themselves permissions. But there is a twist: Local administrators can also remove that deny, unless a domain admin with a GPO has imposed limited (perhaps ineffective) administrative rights. For service rights, see https://msdn.microsoft.com/en-us/library/ms143504(v=sql.110).aspx, section titled "Service Configuration and Access Control"
December 2, 2015 at 10:05 pm
Okay, i see a bunch of logs in there any in particular that i should be looking at first?
December 2, 2015 at 10:15 pm
Summary.txt should point to the first log to inspect (for each bootstrap log summary).
December 2, 2015 at 10:17 pm
Add Administrators Group to the file security permissions with full control of the Data file (S:) and the Log File (T:).
December 3, 2015 at 12:08 pm
My AD user which has sysadmin is in the local admin group and local admins have full rights to all drives.
December 3, 2015 at 12:38 pm
As I mentioned above, even administrators can deny themselves permissions. And a domain administrator can impose group policies that will also restrict what a local administrator can do. Being a member in the local administrators group is a good start, but is not sufficient. For example, you should discuss this post's situation with your domain administrator.
I also mentioned service rights. Did you check them? If not, run gpedit.msc, click Computer Configuration | Windows Settings | Security Settings | Local policies | User Rights Assignment, and ensure the rights in above URL are present. If they are not present, you need to add them, or, you need to determine why the effective permissions for your local administrator account were insufficient.
December 4, 2015 at 10:20 am
So . . . I feel like an idiot.
When i was installing SQL I never filled in anything for the servies. (IE i thought it would use the nt service ect.) and didn't fill in the passwords. I presume this is 1. not a best practice and/or 2. won't work as I experienced.
The first time I tried to assign the AD account to run the services I just clicked start first (and the service didn't start)
Well, I should have been clicking apply first and then start. (which works and starts the service)
Only other thing changed was that I did have out manged hosting provider change the vmware option as suggested by this post.
http://jonmorisissqlblog.blogspot.com/2013/04/event-id-7000-sql-serverservice-failed.html]
which references this post http://qa.sqlservercentral.com/Forums/Topic1300021-2799-2.aspx
which references this post:
We ran into a similar problem when installing SQL 2012 on a Server 2012 VMWare ESXi 5.x host. The audit policy was our first thought and with enterprise GPOs pushing that out we searched for other solutions. What ended up fixing it was a VMWare setting change.
I am re-running the install to make sure it didn't miss anything.
Other then that everything so far seems to be working.
Viewing 8 posts - 1 through 7 (of 7 total)
You must be logged in to reply to this topic. Login to reply