SQL 2014 Agent Job Failure

Hi, 

I have server that had 2008 Standard edition on it. There were some jobs on the instance with owner being set as domain service account. We installed 2014 Enterprise edition on same box and transfer jobs to the new instance. The jobs start failing with below error message. 

The job failed.  Unable to determine if the owner (myDomain\SQLServiceAccount) of job "XXXXXXX" has server access (reason: Could not obtain information about Windows NT group/user 'myDomain\SQLServiceAccount', error code 0x6e. [SQLSTATE 42000] (Error 15404)).

If I am changing the job owner to SA it is working fine, but does not like the idea of using SA as job owner. 

Any help will be appreciated.

July 22nd, 2015 12:50pm

Does the account myDomain\SQLServiceAccount is added into SQL Server security--Logins . If you want to make login as owner of job that login must be in SQL Server logins  can you check
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2015 12:57pm

Yes, it is absolutely there. 
July 22nd, 2015 1:11pm

Yes, it is absolutely th
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2015 2:21pm

make sure account is not locked in AD level and Domain controller is accessible. Check these too..

https://social.technet.microsoft.com/Forums/windowsserver/en-US/27f62fc2-aa74-4c9c-b559-b65b20d6bbb3/could-not-obtain-information-about-windows-nt-groupuser-domainuser-error-code-0x5?forum=winserverDS

July 22nd, 2015 2:27pm

Verify that the SID for the job owner (sysjobs in msdb, I think) matches the logins in sys.server_principals. And use sp_validate_logins to see that it doesn't flag this login as orphaned (doesn't exist in domain). That is the chain used in the end, and above will hopefully let you know where it breaks. 
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2015 2:46pm

Yes, it is absolutely there.&

July 22nd, 2015 2:56pm

Verify that the SID for the job owner (sysjobs in msdb, I think) matches the logins in sys.server_principals. And use sp_validate_logins to see that it doesn't flag this login as orphaned (doesn't exist in domain). That is the chain used in the end, and above will hopefully let you know where it bre
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2015 3:04pm

The error points to permission/access problems with the AD. 0x6e = 110, NET HELPSMG 110 says The system cannot open the device or file specified.

You said that you tried different service accounts, but not service accounts for what. It's the service accuont for Agent that matters. And if you are running Agent under some local account like NT SERVICE/SQLAGENT, it is the machine account that needs access in the AD.

July 22nd, 2015 5:31pm

Erland, 

Service account for SQL agent is "NT Service/SQLAgent..." as you said. Could you please guide me how I can set that account to have access to AD?

Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2015 6:00pm

Service account for SQL agent is "NT Service/SQLAgent..." as you said. Could you please guide me how I can set that account to have access to AD?

You can't. That is an account local to the machine. Possibly access could be granted to DOMAIN\MACHINE$ (that is, the machine account). This works in some situations, but I am not going vouch that it works Active Directory. An alternative is to let the service account be a domain account.

July 23rd, 2015 4:37am

I'd be a bit surprised if using a virtual account (which is what is used now) is the cause of this problem. I frequently use the default, unless I have a reason not to. I mean, why have yet another account in the domain with password never expires?

Perhaps there is some synchronization issues between the domain controllers?

Hoever, the situation still stands, and the return code does indeed indication a permission issue. I would first rule out domain problems (just in case) and as second thing change (even if temporarily) the service account for the Agent service to a domain account. Make sure that thie is done using the right tool: SQL Server Configuration Manager tool - important.

Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2015 7:26am

I'd be a bit surprised if using a virtual account (which is what is used now) is the cause of this problem. I frequently use the default, unless I have a reason not to. I mean, why have yet another account in the domain with password never expires?

A virtual account like NT Services only has permissions on the local machine, so I'm fairly sure that this is part of the equation. But if granting the machine account permission in the AD is fine, well go for that.

July 23rd, 2015 5:17pm

I am using that service account for all my server that are in domain. It is working for all servers and instances except this instance. The old instance of same server is working fine. 

I am going through you guys suggestions and checking them. 

Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2015 5:23pm

I am just shooting in the dark now, but can you use SSMS to connect to your new instance outside of the server?  I am just curious if there is some whacky SPN issue or some other issue about the instance not being registered correctly on the domain.
July 23rd, 2015 5:32pm

Yes, I can connect to that instance outside of the server. Also, if I am using "sqlcmd -L", instance is showing up in the list. 
Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2015 5:41pm

How about ... the new SQL Server being set up for mixed authentication?  If that isn't it, I will leave it up to the actual SQL Server DBA types to answer this question.
July 23rd, 2015 5:47pm

I am using that service account for all my server that are in domain.

No, you are not. NT Service/SQLAGENT is an account local to the machine. You may use namesake accounts on other machines, but they are not the same account.

Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2015 6:16pm

I am using that service account for all my server that are in domain.

No, you are not. NT Service/SQLAGENT is an account local to the machine. You may use namesake accounts on other machines, but they are not the same account.

July 23rd, 2015 6:28pm

How about ... the new SQL Server being set up for mixed authentication?  If that isn't it, I will leave it up to the actual SQL Server DBA types to answer this question.
It is mixed mode. 
Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2015 6:29pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics