Microsoft KB Archive/237604

= PRB: SQL Server Agent does not start and displays error 18456 =

Article ID: 237604

Article Last Modified on 7/23/2004

-

APPLIES TO


 * Microsoft SQL Server 7.0 Standard Edition
 * Microsoft SQL Server 2000 Standard Edition

-



This article was previously published under Q237604



SYMPTOMS
The SQL Server Agent Service does not start and you may see the following error message in the Windows Event Viewer:

SQLServerAgent could not be started (reason: Unable to connect to server; SQLServerAgent cannot start).

Additionally, if you attempt to start the SQL Server Agent Services from a command line (for example, C:\MSSQL7\BINN\>sqlagent -c -v) you may see the following error messages in the C:\MSSQL7\LOG\SQLAGENT.OUT file:

7/13/99 2:07:43 PM - ? [129] SQLServerAgent starting under Windows NT service control

7/13/99 2:07:43 PM - ! [298] SQLServer Error: 18456, Login failed for user 'DomainName\UserName'. [SQLSTATE 28000]

7/13/99 2:07:43 PM - ! [000] Unable to connect to server; SQLServerAgent cannot start

7/13/99 2:07:44 PM - ? [098] SQLServerAgent terminated (normally)



CAUSE
The BUILTIN\Administrators login does not have access to SQL Server or the BUILTIN\Administrators login has been removed from SQL Server, and the SQLAgent service is starting under the LocalSystem account.

The issue does not occur if the SQLAgent service is starting under a domain or computer account that is listed separately in SQL Server Enterprise Manager and that has System Administrators (sysadmin) privileges.



WORKAROUND
To put the BUILTIN\Administrators account back into SQL Server, start the SQL Enterprise Manager. Go to \Servername\Security\Logins and grant access to the BUILTIN\Administrators user.

If you really want to deny access to SQL Server by Windows NT administrators, you can remove the BUILTIN\Administrators account. First add the login account you are using for the SQL Agent Service as a SQL Server login and assign the System Administrator (sa) role to that account. Then either revoke the System Administrators (sysadmin) role permissions from the BUILTIN\Administrators account, or delete the BUILTIN\Administrators account completely from the Logins in SQL Server Enterprise Manager.

For additional information, see the SQL Server Books Online topic "Viewing and Modifying Role Memberships," which is available at the following MSDN Web site:

http://msdn.microsoft.com/library/en-us/adminsql/ad_security_9xpv.asp



MORE INFORMATION
Note that when you run the service by clicking Control Panel and then choosing Services that there are not any helpful error messages. You have to check the Windows Event Viewer or start the service from the command prompt to see them.

Additional query words: sqlagent sql agent security

Keywords: kbprb KB237604

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.