Prev: Sending html-mail from sql server 2005
Next: generated insert, update and delete
From: REDUCT on 21 Jan 2007 15:55
Charles, I ran Tcpview and TCP ports 2382 and 2383 are not open for AS. Port
2382 is open when I run sqlbrowser.
Reductrex


"Charles Wang[MSFT]" wrote:

> Hi Reductrex,
> To let me better understand your issue, could you please confirm with me
> the following questions:
> 1. Did the error "The parameter is incorrect" occur before or after your
> changing the Analysis service startup account?
> 2. Could you connect to your Analysis server from SQL Server 2005
> Management Studio?
> 3. Could you connect to your Analysis server from another machine?
> 4. Had the TCP ports 2382 and 2383 been opened and listened by Analysis
> service on your Analysis server?
> You can use telnet command to check if they are opened and use
> PortQry.exe to check if the ports are listenning.
>
> You can download the tool PortQry from this link:
> PortQry Command Line Port Scanner Version 2.0
> http://www.microsoft.com/downloads/details.aspx?familyid=89811747-C74B-4638-
> A2D5-AC828BDC6983&displaylang=en
>
> Also, I recommend that you use TCPView or TDIMon to monitor the connection
> process.
> Please download one of them from the following links:
> TCPView for Windows v2.4
> http://www.microsoft.com/technet/sysinternals/utilities/tcpview.mspx
> TDIMon
> http://www.sysinternals.com/Utilities/TdiMon.html
>
> Please feel free to let me know if you have any other questions or concerns.
>
> Sincerely yours,
> Charles Wang
> Microsoft Online Community Support
>
> ======================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
> ======================================================
>
>
From: Charles Wang[MSFT] on 22 Jan 2007 04:59
Hi Reductrex,
From my test, to start the SQL Server Analysis Service, the NETWORK SERVICE
account needs to be added to Administrators group since its default
previledge is not enough for starting AS service. Please try adding the
account to the local Administrators group and see if this issue persists.

But I have a question, why did you want to use NETWORK SERVICE account as
its startup account?
From this article, we can see that it is not recommended as a startup
account for SQL Server services:
Service Account
http://msdn2.microsoft.com/en-us/library/ms143691.aspx

For installing SP1, yes, to prevent data losses, it is recommended to back
up your databases before install it.

Look forward to your response.

Sincerely yours,
Charles Wang
Microsoft Online Community Support




From: Dave Markle on 22 Jan 2007 07:16
Charles:

That's an interesting article, but I'm perplexed as to why NETWORK
SERVICE isn't considered to be a good account to run SQL Server under --
the article gives no reasons. It seems to indicate that LOCAL SYSTEM is
more appropriate. That's sort of confusing as I would assume this to be
a violation of the Principle of Least Privilege.

Do you know of an article with some more details on this? I prefer not
to use domain accounts when possible -- I don't like having to maintain
a password for service accounts.

-Dave

Charles Wang[MSFT] wrote:
> Hi Reductrex,
> From my test, to start the SQL Server Analysis Service, the NETWORK SERVICE
> account needs to be added to Administrators group since its default
> previledge is not enough for starting AS service. Please try adding the
> account to the local Administrators group and see if this issue persists.
>
> But I have a question, why did you want to use NETWORK SERVICE account as
> its startup account?
> From this article, we can see that it is not recommended as a startup
> account for SQL Server services:
> Service Account
> http://msdn2.microsoft.com/en-us/library/ms143691.aspx
>
> For installing SP1, yes, to prevent data losses, it is recommended to back
> up your databases before install it.
>
> Look forward to your response.
>
> Sincerely yours,
> Charles Wang
> Microsoft Online Community Support
>
>
>
>


--
-Dave Markle

http://www.markleconsulting.com/blog
From: Charles Wang[MSFT] on 23 Jan 2007 05:05
Hi Dave,
Please refer to this article:
NetworkService Account
http://msdn2.microsoft.com/en-us/library/ms684272.aspx

I think that is decided by your requirements. Per my understanding, in many
cases, SQL Server services need to access local or remote resources or
other remote SQL Server services. By default, NETWORK SERVICE account is
not allowed for these services or resources. You may need to do many
configurations to make it work. Local System account is a balance between
NETWORK SERVICE and Administrators account.

Please feel free to let me know if you have any other questions or concerns.

Sincerely yours,
Charles Wang
Microsoft Online Community Support

======================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================





From: Dave Markle on 23 Jan 2007 07:50
I'm going to move this discussion to the "Security" newsgroup...

Charles Wang[MSFT] wrote:
> Hi Dave,
> Please refer to this article:
> NetworkService Account
> http://msdn2.microsoft.com/en-us/library/ms684272.aspx
>
> I think that is decided by your requirements. Per my understanding, in many
> cases, SQL Server services need to access local or remote resources or
> other remote SQL Server services. By default, NETWORK SERVICE account is
> not allowed for these services or resources. You may need to do many
> configurations to make it work. Local System account is a balance between
> NETWORK SERVICE and Administrators account.
>
> Please feel free to let me know if you have any other questions or concerns.
>
> Sincerely yours,
> Charles Wang
> Microsoft Online Community Support
>
> ======================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from this issue.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
> ======================================================
>
>
>
>
>


--
-Dave Markle

http://www.markleconsulting.com/blog
First  |  Prev  |  Next  |  Last
Pages: 1 2 3
Prev: Sending html-mail from sql server 2005
Next: generated insert, update and delete