Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 SQL Agent account

Author  Topic 

stumbling
Posting Yak Master

104 Posts

Posted - 2009-11-08 : 23:19:19
Hi All

last week i concentrated on Mirroring and so far love it.

This week i can not for the life of me get my agent account to run a move command on my backup files. I need to run this after the end of the backup to move them to another server.

I have the agent running under a domain account basic user and the error i get when i try and move the files is as follows:

Message
Executed as user: domain\user. Access is denied. Process Exit Code 1. The step failed.

Now i have tried giving folder permissions to the domain account but it makes no difference, i know the move command is ok as i can run it in dos or from run.

Any help would be great.

Cheers

stumbling
Posting Yak Master

104 Posts

Posted - 2009-11-09 : 00:20:09
I know that this is a permissions issue at this point i just placed the domain account in as a local backup operator on the machine and restarted the agent and the job worked however this is not what i want to do. Is there some way around this?

Cheers
Go to Top of Page

stumbling
Posting Yak Master

104 Posts

Posted - 2009-11-09 : 01:56:25
I have even tried EXEC master..xp_cmdshell using the move command that i know works in dos this give me the response. Access is denied.

Still trying i have given the domain account that sql agent runs under full access to the folders without any luck?

Anyone?
Go to Top of Page

stumbling
Posting Yak Master

104 Posts

Posted - 2009-11-09 : 04:22:01
Ok so i worked out that if i run 2 separate domain accounts with minimal privileges for running SQL service and SQL agent it appears the only way i can run CMdexec queries is either to
A) give more privileges o my domain account something i am not keen on or
B) use credentials and a proxy account.

Feel free to let me know if i an completely mad!!!!!

I think that i will have to go the path of a proxy account unless somebody out there has a better suggestion.

Cheers
Go to Top of Page
   

- Advertisement -