I have a scheduled job which has been failing for a while,
and the only way I have now been able to have it concluded
successfully and with required data transfer result is
when the service-account is member of the domain-admins
group. Adding the service-account only to the local-admins
group of concerned systems gives successfull job
completion but with empty result.
Thus my question is, why must the service-account be
member of the domain-admins group, when the job itself is
to run under the domain-admin account that has full
permission on all systems.
I will appreciated any clarification.What exactly is the job trying to do ?
--
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"topokin" <bimosekin@.hotmail.com> wrote in message
news:b9c101c381a1$241e5030$a601280a@.phx.gbl...
I have a scheduled job which has been failing for a while,
and the only way I have now been able to have it concluded
successfully and with required data transfer result is
when the service-account is member of the domain-admins
group. Adding the service-account only to the local-admins
group of concerned systems gives successfull job
completion but with empty result.
Thus my question is, why must the service-account be
member of the domain-admins group, when the job itself is
to run under the domain-admin account that has full
permission on all systems.
I will appreciated any clarification.|||Whether or not you need a domain admin account depends on what you are
trying to do. In general, there is really no need for the service account or
the account tha runs the job to be a member of the domain admin. In most
places, you'd be told to get lost by the NT admin if you ask for the domain
admin rights.
I'd suggest you carefully log your jobs. For instance, you can specify an
output file for each step in its Advanced tab. You can then review this
output file to find more about the nature of the failure.
--
Linchi Shea
linchi_shea@.NOSPAMml.com
"topokin" <bimosekin@.hotmail.com> wrote in message
news:b9c101c381a1$241e5030$a601280a@.phx.gbl...
> I have a scheduled job which has been failing for a while,
> and the only way I have now been able to have it concluded
> successfully and with required data transfer result is
> when the service-account is member of the domain-admins
> group. Adding the service-account only to the local-admins
> group of concerned systems gives successfull job
> completion but with empty result.
> Thus my question is, why must the service-account be
> member of the domain-admins group, when the job itself is
> to run under the domain-admin account that has full
> permission on all systems.
> I will appreciated any clarification.
>
No comments:
Post a Comment