SQL SERVER AGENT WON'T START (SQL 2008 R2)

Question

Environment - SQL Server 2008 R2, WIndows server 2007 sp2

SQL Agent fails to start and throws error "Access is denied." , When the SQL Agent account is added to the admin group the agent succeeds otherwise it fails, On the other hand the SQL Server service by itself  perfoms fine and continues to work without any  error, Since we cannot afford to have the agent with local admin permissions , i am stuck with this problem and would be glad to hear some ideas.

1) SQL Agent SID have complete permissions (full control) to Jobs(working folder) and Log folder.

2) SQL agent SID has SA permissions in SQL Server.

Troubleshooting

1) Launched Procesmonitor from sysinternals , unable to trace the SQL Server agent startup errors

2) SQL server agent doesnt appear in Task Manager->Process when agent is manually started.

3) verified regitry for errorlog path and its accessibility/permissions.

4) Nothing is getting written in SQL Agent Logs (not even new logs are generated) , Tried renaming SQL AGENT.OUT doesnt help

 

Answer 1

 

Hello,

Please review NT Rights and privileges, Windows Permissions and other requirements for SQL Server service accounts (including SQL Server Agent service) on the following link:

http://msdn.microsoft.com/en-us/library/ms143504.aspx

Hope this helps.

Regards,

Alberto Morillo
SQLCoffee.com

Answer 2

Alberto ,

Thanks for your response ..

I Verified
1)Log on as a service (SeServiceLogonRight)
2)Replace a process-level token (SeAssignPrimaryTokenPrivilege)
3)Bypass traverse checking (SeChangeNotifyPrivilege)
4)Adjust memory quotas for a process (SeIncreaseQuotaPrivilege)

Also verified /Gave permissions for folders )

1)Instid\MSSQL\binn
2)Instid\MSSQL\Log
3)100\com
4)100\shared
5)100\shared\Errordumps
6)ServerName\EventLog

Still having the same error any other suggestions

Answer 3

Hi Vish_SQL,

SQL agent SID has SA permissions in SQL Server.

Does that SID means Service ID? Does your service ID has SA permissions in SQL Server? You have mentioned that When the SQL Agent account is added to the admin group the agent succeeds otherwise it fails. I'm confused that if your Agent SID has sa permissions. If I misunderstand it, please correct me.

What kind of account you use for the SQL Server agent? Built-in account or this account? Please also refer to this article: Selecting an Account for the SQL Server Agent Service

---

Best Regards,
Iric
Please remember to mark the replies as answers if they help and unmark them if they provide no help.