MS SQL Server security - Sql locking other domain account out

Author

Sql locking other domain account out

Mike Watson

2006-11-23, 7:13 pm

This is a really weird one, I'll try and explain as best I can!

Scenario(names are not the real ones BTW) -
RES - resource domain
AD - active directory

A server in the RES domain has sql server running under an account RES\SQL.
I connect to it with my own account which is in the AD and has full admin
access.

Fine so far, now I'll set a database to simple recovery mode. This works
fine and we continue as normal. Then I discover that during this process an
account in the active directory called AD\SQL has now been locked out!

I cant for the life of me see how this is happening with such a mundane task.

Any ideas?

Thanks, Mike
Thanks.

Uri Dimant

2006-11-26, 5:13 am

Mike
Can you run SQL Server Profiler to see what is going on?

"Mike Watson" < MikeWatson@discussio
ns.microsoft.com> wrote in message
news:724A6CB6-E007-44E1-BC3E- 0CAC4BFF05A9@microso
ft.com...
> This is a really weird one, I'll try and explain as best I can!
>
> Scenario(names are not the real ones BTW) -
> RES - resource domain
> AD - active directory
>
> A server in the RES domain has sql server running under an account
> RES\SQL.
> I connect to it with my own account which is in the AD and has full admin
> access.
>
> Fine so far, now I'll set a database to simple recovery mode. This works
> fine and we continue as normal. Then I discover that during this process
> an
> account in the active directory called AD\SQL has now been locked out!
>
> I cant for the life of me see how this is happening with such a mundane
> task.
>
> Any ideas?
>
> Thanks, Mike
> Thanks.
>

Mike Watson

2006-11-30, 7:14 pm

"Uri Dimant" wrote:

> Mike
> Can you run SQL Server Profiler to see what is going on?
>
Uri, I fired off a full profiler trace but nothing unexpected was present.
No sign of commands trying to run as the wrong user and the commands
themselves to set the recovery mode all look correct.

Sponsored Links