Hello,

When trying to login using the VMM console I get the following error.

"The SQL Server service account does not have permission to access Active Directory Domain Services (AD DS).

Ensure that the SQL Server service is running under a domain account or a computer account that has permission to access AD DS. For more information, see "Some applications and APIs require access to authorization information on account objects" in the Microsoft Knowledge Base at http://go.microsoft.com/fwlink/?LinkId=121054.

ID: 2607

This is a clean installation on Server 2012 R2. The setup is as the following;

-       VMM and SQL installed on same server

-       Domain user (not domain admin) is member of local administrators group on the VMM server

-       Domain user used for VMM service account

-       Domain user used for SQL service account

-       Domain user is DBOwner

What works;

Console login using the service account user on the local machine or remote machine

What fails;

Console login using any other user specified in the Administrator user Role of VMM

Any ideas?

• Edited by Paul77MTL Friday, January 24, 2014 2:09 PM

After much investigation I solved the issue.

The SQL service account needs to be delegated the "Read All Properties" in the AD.

Case closed

• Proposed as answer by Shabarinath Thursday, January 30, 2014 12:21 PM
• Marked as answer by Paul77MTL Wednesday, February 05, 2014 7:34 PM