Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Tuesday, March 27, 2012

Can't start SQLEXPRESS so that I can't install latest SQLEXPRESS security updates.

I can't start SQLEXPRESS.

The SQL ERRORLOG shows: Error is 3414, Severity 21, State 2 and says: "An error occurred during recovery, preventing the database 'model' (database ID 3) from restarting." Just prior to this, I get a warning: "did not see LP_CKPT_END".

Any thoughts why this might be and how I can fix this?

Seems like something happened to your master database, check out the BOL topic on restoring master for starters.

Mike

|||

Thank you for your thoughts.

Unfortunately, I am not able to restore the database because I can't start SQLEXPRESS. I have even tried the command line sqlservr -s SQLEXPRESS command line command without success.

I continue to get this warning "did not see LP_CKPT_END" Error:3414, Severity:21, State: 1.

It might help to know that I have never used the SQLEXPRESS database on my box before. (I also have an instance of MSSQLSERVER and that is what I have been using. MSSQLSERVER starts up without issue.)

I'm not sure what it is that I would be restoring as I haven't created any databases in SQLEXPRESS.

The issue began when I update MSSQLSERVER with SP2 (KB 933508) install package. It seemed to take fine. I also did the install after March 5, 2007 -- a critical date for this update.

When the SQL 2005 Express SP2 (KB 921896) came out, it would load because it couldn't start an instance of SQLEXPRESS.

Does this help explain the background better? Your further suggestions would be helpful.

|||

This one is beyond me. Moving to the setup forum to ask the experts.

Mike

Sunday, March 11, 2012

Can't run my scheduled job which accesses a linked server: other options?

In SQL 2000, change the job owner to sysadmin.
In SQL 2005, change the job security context.
Arnie Rowland, YACE*
"To be successful, your heart must accompany your knowledge."
*Yet Another certification Exam
<ryan_willow@.hotmail.com> wrote in message
news:1151015746.073933.305090@.r2g2000cwb.googlegroups.com...
>I have a stored procedure in a database on a server, and this stored
> procedure uses a linked server.
> The login I was given is only granted DBO permissions on this database.
> I am trying to set this up so that the above stored procedure runs once
> per month, so I naturally tried to set up a Job which would do this.
> I have discovered from another group that:
> "You cannot access a linked server from a TSQL jobstep if you aren't
> sysadmin."
> So: How can I automatically run this stored procedure once per month
> under these conditions?
> Thanks,
> Ryan
>I'm in SQL 2000.
I cannot change the job owner because my permissions do not allow this.
Apparently a dbo user named 'User' can only create a job with owner
'User'. I am trying to implement this without having to step outside
my dbo security level. Is this going to be possible, and if so how?
Thanks.
Arnie Rowland wrote:[vbcol=seagreen]
> In SQL 2000, change the job owner to sysadmin.
> In SQL 2005, change the job security context.
> --
> Arnie Rowland, YACE*
> "To be successful, your heart must accompany your knowledge."
> *Yet Another certification Exam
>
> <ryan_willow@.hotmail.com> wrote in message
> news:1151015746.073933.305090@.r2g2000cwb.googlegroups.com...|||That will not be possible without coordination with the server
administrator. Since Jobs have the potential for significant performance
issues as well as security issues for the server, the security context for
Jobs is sysadmin. (in SQL2000).
And of course a SQL Server Administrator is probably not going to allow you
to have permission to create or change a job because of the potential that
it could execute any code or activity under the sysadmin security context.
Jobs are a 'Server' level activity -NOT a database level activity. Even if a
job is confined to a single database, it still operates as a server level
activity.
That changes with SQL 2005.
--
Arnie Rowland, YACE*
"To be successful, your heart must accompany your knowledge."
*Yet Another certification Exam
"Ryan" <ryan_willow@.hotmail.com> wrote in message
news:1151017863.128715.208750@.g10g2000cwb.googlegroups.com...
> I'm in SQL 2000.
> I cannot change the job owner because my permissions do not allow this.
> Apparently a dbo user named 'User' can only create a job with owner
> 'User'. I am trying to implement this without having to step outside
> my dbo security level. Is this going to be possible, and if so how?
> Thanks.
> Arnie Rowland wrote:
>|||Very informative, thanks Arnie.
Arnie Rowland wrote:[vbcol=seagreen]
> That will not be possible without coordination with the server
> administrator. Since Jobs have the potential for significant performance
> issues as well as security issues for the server, the security context for
> Jobs is sysadmin. (in SQL2000).
> And of course a SQL Server Administrator is probably not going to allow yo
u
> to have permission to create or change a job because of the potential that
> it could execute any code or activity under the sysadmin security context.
> Jobs are a 'Server' level activity -NOT a database level activity. Even if
a
> job is confined to a single database, it still operates as a server level
> activity.
> That changes with SQL 2005.
> --
> Arnie Rowland, YACE*
> "To be successful, your heart must accompany your knowledge."
> *Yet Another certification Exam
>
> "Ryan" <ryan_willow@.hotmail.com> wrote in message
> news:1151017863.128715.208750@.g10g2000cwb.googlegroups.com...|||I have a stored procedure in a database on a server, and this stored
procedure uses a linked server.
The login I was given is only granted DBO permissions on this database.
I am trying to set this up so that the above stored procedure runs once
per month, so I naturally tried to set up a Job which would do this.
I have discovered from another group that:
"You cannot access a linked server from a TSQL jobstep if you aren't
sysadmin."
So: How can I automatically run this stored procedure once per month
under these conditions?
Thanks,
Ryan|||In SQL 2000, change the job owner to sysadmin.
In SQL 2005, change the job security context.
Arnie Rowland, YACE*
"To be successful, your heart must accompany your knowledge."
*Yet Another certification Exam
<ryan_willow@.hotmail.com> wrote in message
news:1151015746.073933.305090@.r2g2000cwb.googlegroups.com...
>I have a stored procedure in a database on a server, and this stored
> procedure uses a linked server.
> The login I was given is only granted DBO permissions on this database.
> I am trying to set this up so that the above stored procedure runs once
> per month, so I naturally tried to set up a Job which would do this.
> I have discovered from another group that:
> "You cannot access a linked server from a TSQL jobstep if you aren't
> sysadmin."
> So: How can I automatically run this stored procedure once per month
> under these conditions?
> Thanks,
> Ryan
>|||I'm in SQL 2000.
I cannot change the job owner because my permissions do not allow this.
Apparently a dbo user named 'User' can only create a job with owner
'User'. I am trying to implement this without having to step outside
my dbo security level. Is this going to be possible, and if so how?
Thanks.
Arnie Rowland wrote:[vbcol=seagreen]
> In SQL 2000, change the job owner to sysadmin.
> In SQL 2005, change the job security context.
> --
> Arnie Rowland, YACE*
> "To be successful, your heart must accompany your knowledge."
> *Yet Another certification Exam
>
> <ryan_willow@.hotmail.com> wrote in message
> news:1151015746.073933.305090@.r2g2000cwb.googlegroups.com...|||That will not be possible without coordination with the server
administrator. Since Jobs have the potential for significant performance
issues as well as security issues for the server, the security context for
Jobs is sysadmin. (in SQL2000).
And of course a SQL Server Administrator is probably not going to allow you
to have permission to create or change a job because of the potential that
it could execute any code or activity under the sysadmin security context.
Jobs are a 'Server' level activity -NOT a database level activity. Even if a
job is confined to a single database, it still operates as a server level
activity.
That changes with SQL 2005.
--
Arnie Rowland, YACE*
"To be successful, your heart must accompany your knowledge."
*Yet Another certification Exam
"Ryan" <ryan_willow@.hotmail.com> wrote in message
news:1151017863.128715.208750@.g10g2000cwb.googlegroups.com...
> I'm in SQL 2000.
> I cannot change the job owner because my permissions do not allow this.
> Apparently a dbo user named 'User' can only create a job with owner
> 'User'. I am trying to implement this without having to step outside
> my dbo security level. Is this going to be possible, and if so how?
> Thanks.
> Arnie Rowland wrote:
>|||Very informative, thanks Arnie.
Arnie Rowland wrote:[vbcol=seagreen]
> That will not be possible without coordination with the server
> administrator. Since Jobs have the potential for significant performance
> issues as well as security issues for the server, the security context for
> Jobs is sysadmin. (in SQL2000).
> And of course a SQL Server Administrator is probably not going to allow yo
u
> to have permission to create or change a job because of the potential that
> it could execute any code or activity under the sysadmin security context.
> Jobs are a 'Server' level activity -NOT a database level activity. Even if
a
> job is confined to a single database, it still operates as a server level
> activity.
> That changes with SQL 2005.
> --
> Arnie Rowland, YACE*
> "To be successful, your heart must accompany your knowledge."
> *Yet Another certification Exam
>
> "Ryan" <ryan_willow@.hotmail.com> wrote in message
> news:1151017863.128715.208750@.g10g2000cwb.googlegroups.com...

Wednesday, March 7, 2012

Can't register SQL Server locally due to Login problems

Hello,
I had installed SQL Server 2000 locally on my machine and I had 2 security
logins: -
1. sa - default database was set to dbTest
2. mydomain\myusername - default database was set to dbTest
The thing is, "dbTest" was deleted due to some testing and now when I try
to connect to my SQL Server with Enterprise Manager, Login fails as the
default database is missing.
Is there a way I can register back my server ?
Thanks,
Sam.
--
Message posted via http://www.sqlmonster.comYou can try connecting via osql.exe (a command line tool) and issue the
appropriate command to change the default database (using sp_defaultdb).
or
You can try modifying your shortcut to Query Analyzer to something like
this:
"C:\Program Files\Microsoft SQL
Server\80\Tools\Binn\isqlw.exe" -SYourMachineNameHere -Usa -PTheSApwdGoesHer
e -dtempdb
I use the modified shortcut method to connect to a specific server and
connect to a specific database. However I don't know if you will be able to
do this if the user's default database is unavailable.
--
Keith
"Sameer Premji via SQLMonster.com" <forum@.SQLMonster.com> wrote in message
news:3c315b71f1a74a548e1b9c93ad0da038@.SQLMonster.com...
> Hello,
> I had installed SQL Server 2000 locally on my machine and I had 2 security
> logins: -
> 1. sa - default database was set to dbTest
> 2. mydomain\myusername - default database was set to dbTest
> The thing is, "dbTest" was deleted due to some testing and now when I try
> to connect to my SQL Server with Enterprise Manager, Login fails as the
> default database is missing.
> Is there a way I can register back my server ?
> Thanks,
> Sam.
> --
> Message posted via http://www.sqlmonster.com|||The shortcut didn't work.
How do I use osql.exe because double-clicking on it, vanishes and what is
the statement ?
--
Message posted via http://www.sqlmonster.com|||Since osql is a command line tool you need to
Start | Run | cmd <enter>
osql /? <enter>
--
Keith
"Sameer Premji via SQLMonster.com" <forum@.SQLMonster.com> wrote in message
news:2313ae62041a424caca786036f7b4385@.SQLMonster.com...
> The shortcut didn't work.
> How do I use osql.exe because double-clicking on it, vanishes and what is
> the statement ?
> --
> Message posted via http://www.sqlmonster.com

Can't print from SSRS on Citrix

Hi,
We have SSRS 2005 running on SQL Server 2000 on a Citrix network. When I
click the print icon in SSRS, I get an Internet Explorer Security Warning
asking if I want to install Microsoft SQL Server. When I click "Don't
Install" I get the message, "Unable to load client print control." It seems
like there's a component that needs to be installed to enable printing from
SSRS, but I don't know what it is. Can anyone point me in the right
direction here?
--
Thanks,
JeffI think the IE security Warning refers to installing SSRS's report
preview/print activeX control, not the SQL Server itself. When you use IE to
open a report and try to print it the first time, that preview/print ActiveX
control must be downloaded to the computer where IE run and installed. So,
you need to go ahead to allow the installation once for all.
"Jeff Stroope" <JeffStroope@.discussions.microsoft.com> wrote in message
news:6C241737-15F5-4A8C-9FD5-724D650105DC@.microsoft.com...
> Hi,
> We have SSRS 2005 running on SQL Server 2000 on a Citrix network. When I
> click the print icon in SSRS, I get an Internet Explorer Security Warning
> asking if I want to install Microsoft SQL Server. When I click "Don't
> Install" I get the message, "Unable to load client print control." It
> seems
> like there's a component that needs to be installed to enable printing
> from
> SSRS, but I don't know what it is. Can anyone point me in the right
> direction here?
> --
> Thanks,
> Jeff|||Thanks Norman!
--
Thanks,
Jeff
"Norman Yuan" wrote:
> I think the IE security Warning refers to installing SSRS's report
> preview/print activeX control, not the SQL Server itself. When you use IE to
> open a report and try to print it the first time, that preview/print ActiveX
> control must be downloaded to the computer where IE run and installed. So,
> you need to go ahead to allow the installation once for all.
> "Jeff Stroope" <JeffStroope@.discussions.microsoft.com> wrote in message
> news:6C241737-15F5-4A8C-9FD5-724D650105DC@.microsoft.com...
> > Hi,
> >
> > We have SSRS 2005 running on SQL Server 2000 on a Citrix network. When I
> > click the print icon in SSRS, I get an Internet Explorer Security Warning
> > asking if I want to install Microsoft SQL Server. When I click "Don't
> > Install" I get the message, "Unable to load client print control." It
> > seems
> > like there's a component that needs to be installed to enable printing
> > from
> > SSRS, but I don't know what it is. Can anyone point me in the right
> > direction here?
> > --
> > Thanks,
> >
> > Jeff
>
>

Friday, February 10, 2012

Can't Get Security Filters to Work

I've added in a Security Filter to my Report Model as documented by Bob
here:
http://blogs.msdn.com/bobmeyers/pages/Implementing-Data-Security-in-a-Report-Model.aspx
But I'm still seeing all data in report runs - what am I doing wrong?
Any other switches or settings I need? Do I need to turn on 'individual
model item' security in Management Studio? I did try that but didn't see
any difference.
ThanksI figured out my problem: I forgot to add the filter to the Security Filters
collection.
Works now.
Thanks.