Tuesday, March 3, 2015

15404 Could not obtain information about Windows NT group/user

Error message:

03/03/2015 12:43:09,spid28s,Unknown,An exception occurred while enqueueing a message in the target queue. Error: 15404 State: 19. Could not obtain information about Windows NT group/user 'domain\svc_name' error code 0x5.
03/03/2015 12:43:09,spid28s,Unknown,Error: 28005 Severity: 16 State: 2.


Diagnosis:

Can confirm this by executing the following SQL:


xp_logininfo 'domain\svc_name'


Msg 15404, Level 16, State 19, Procedure xp_logininfo, Line 62
Could not obtain information about Windows NT group/user 'domain\svc_name', error code 0x5.



Resolution:

A: Give the “Authenticated Users”  “Read Permissions” on the ADFS service account.

-or-

B: Add the SQL Server service account or "Authenticated Users" to the "BULTIIN\Windows Authorization Access Group" in AD for the domain

-or- 

C: Add the SQL Server service account or "Authenticated Users" to the "BULTIIN\Pre-Windows 2000 Compatible Access" in AD for the domain


References:

http://setspn.blogspot.com/2012/05/service-accounts-active-directory_6635.html

http://setspn.blogspot.com/2012/05/service-accounts-active-directory_4905.html

http://blog.matticus.net/2009/08/windows-2008-and-xplogininfo.html

No comments:

Post a Comment