Error in event log - Query status of service

keymoo

Hi there,

My SQLBackupAgent is not running as a local admin and I want to keep it that way. How can I grant the correct permissions to correct the error below?

Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 19.12.2008
Time: 11:20:53
User: <DOMAIN>\sa3-DBSQLS01
Computer: DPFADBSQLS01
Description:
Object Open:
Object Server: SC Manager
Object Type: SERVICE OBJECT
Object Name: SQLBackupAgent
Handle ID: -
Operation ID: {0,2045489}
Process ID: 404
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: DPFADBSQLS01$
Primary Domain: <DOMAIN>
Primary Logon ID: (0x0,0x3E7)
Client User Name: sa3-DBSQLS01
Client Domain: <DOMAIN>
Client Logon ID: (0x0,0x1C23D1)
Accesses: Query status of service
Start the service

Privileges: -
Restricted Sid Count: 0
Access Mask: 0x14

Brian Donahue

Hi,

The way to make this work is to grant the "Query Service" right to the SQL Backup Agent Service account for the "SQL Backup Agent" service:

· 'Query Service' rights to the SQL Backup Agent Service (SQLBackupAgent) and the SQL Server Service (MSSQLSVC)
· 'Start Service' rights to the SQL Backup Agent Service in cases where the service is found not to be running
If this is necessary because of a 'locked-down' installation of Windows Server, the Security Configuration and analysis tool can be used to set the Service rights for the SQL Backup Agent startup account.

For Windows 2000, please reference: http://support.microsoft.com/kb/288129
For Windows 2003, please reference: http://support.microsoft.com/kb/325349/en-us

The full list of known permissions for LUA requirements are listed here:
http://www.red-gate.com/supportcenter/C ... 000083.htm