|
Lately one of the sql servers is seeing Error: 18456, Severity: 14, State: 11. Login failed for user 'NT AUTHORITY\SYSTEM'. [CLIENT: xxx.xx.131.221], when i dug into it i saw that this attempt is from cscript.exe on the same database server, i am not sure why this is appearing and why cscript is attemptingto connect to the database? Help needed.. Thanks in advance. Here is more information, i added nt authority\System to the database instance, it successfully logged in and executed the below statement "SELECT dbo.sysprocesses.spid, dbo.sysprocesses.blocked, dbo.sysprocesses.waittime, dbo.sysprocesses.waitresource, dbo.sysprocesses.program_name, dbo.sysprocesses.loginame, dbo.sysdatabases.name FROM dbo.sysprocesses WITH (nolock) INNER JOIN dbo.sysdatabases ON dbo.sysprocesses.dbid = dbo.sysdatabases.dbid WHERE (dbo.sysprocesses.blocked <> 0) AND (dbo.sysprocesses.waittime > 60 * 1000) ORDER BY dbo.sysprocesses.waittime DESC"
(comments are locked)
|
|
It sounds like some external monitoring tool is in use to ascertain SQL Server health.
(comments are locked)
|
|
What is installed on that server? Idera? Quest? SQLSentry? Something is trying to externally query the database...
(comments are locked)
|
|
State 11 means that the user is valid but server access is denied. A fuller explanation of states for error 18456 can be found here cscript is Windows Scripting Host - but I wouldn't know why this is attempting to access the db. Thanks for a quick reply, but i dont think i got my answer.
Jun 03 '10 at 01:00 PM
Varun
No - I wasn't trying to give you the answer, but hopefully the extra info about the connection error may have helped you pin down the cause. I'm not sure anyone here can tell you for certain what's running on your server
Jun 03 '10 at 03:05 PM
Kev Riley ♦♦
(comments are locked)
|
|
Its SCOM Tool which was trying to hit the database, thanks for all the valuable answers.
(comments are locked)
|
