Logon failure

Question

Application Server job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (31016326-39f2-43e3-a3cc-97e4d4791d32).

Reason: Logon failure: the user has not been granted the requested logon type at this computer.

It almost seems too straight forward.  The search is getting logon failed for something it's searching.  For the life of me though i can't figure out what.  This is spamming the event log every minute.  Crawl has no errors.  I don't know how to figure out what that GUID refers to.

Answer 1

 don't suppose anyone can tell me how to find out what this is? 

(31016326-39f2-43e3-a3cc-97e4d4791d32)

I know it's a GUID, but we can't seem to find out how to relate that to a certain craw.  I've checked everything in the DCOM stuff, and the registry.  We still have this problem.  Getting about one per minute and it's causing the OSTIMER to take a constant 25% cpu.  It's really and issue now.

Answer 2

Hi,

Check the objects table of your config database for this Guid.

---

Thanks, Rahul Rashu

Answer 3

Awesome.  That's a step in the right direction but I still can't decypher this.

Id ClassId ParentId Name Status Version Properties
31016326-39F2-43E3-A3CC-97E4D4791D32 A138DA09-202B-4404-8019-713E316377FD C3F2EDB2-DA7C-40C7-AE6C-68F573A4B5EC  0 0x0000000000023A6F <object type="Microsoft.Office.Server.Search.Administration.SearchServiceInstance, Microsoft.Office.Server.Search, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"><fld type="Microsoft.Office.Server.Search.Administration.Role, Microsoft.Office.Server.Search, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" name="m_Role">IndexQuery</fld><fld type="Microsoft.SharePoint.Administration.SPServer, Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" name="m_DedicatedWebFrontEndServer">c3f2edb2-da7c-40c7-ae6c-68f573a4b5ec</fld><fld type="System.Collections.Generic.List`1[[System.String, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]], mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" name="m_PreviousWebApplicationHostNames" /><sFld type="String" name="m_DefaultIndexLocation">H:\Program Files\Microsoft Office Servers\12.0\Data\Office Server\Applications</sFld><sFld type="Int64" name="lastFarmAdminCredentialsVersion">2258</sFld><fld type="System.Collections.Generic.List`1[[System.String, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]], mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" name="queryAccessList"><sFld type="String">NT AUTHORITY\NETWORK SERVICE</sFld><sFld type="String">IBTS\SHarepointAdmin</sFld><sFld type="String">WSS_WPG</sFld><sFld type="String">WSS_ADMIN_WPG</sFld></fld><fld name="m_ServedApps" type="null" /><sFld type="DateTime" name="m_LastHealthTrace">2009-10-08T17:19:20</sFld><fld type="Microsoft.Office.Server.Search.Administration.SearchService, Microsoft.Office.Server.Search, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" name="m_Service">f11e5f9a-e864-457d-bfb1-a1e734e0c3dd</fld><sFld type="Boolean" name="m_timerJobError">False</sFld><fld name="m_Versions" type="null" /><fld name="m_UpgradeContext" type="null" /><fld type="System.Collections.Hashtable, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" name="m_UpgradedPersistedFields" /><fld type="System.Collections.Hashtable, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" name="m_Properties" /><sFld type="String" name="m_LastUpdatedUser">IBTS\KAndersen</sFld><sFld type="String" name="m_LastUpdatedProcess">w3wp</sFld><sFld type="String" name="m_LastUpdatedMachine">DANTE</sFld><sFld type="DateTime" name="m_LastUpdatedTime">2011-05-04T15:58:22</sFld></object>

How can I tell from that which search/crawl this is?