question

scottf3a avatar image
scottf3a asked

Installation of SQL Express 2008 R2 failure

Howdy, Recently, we have started to use SQL Server Express 2008 R2 as well as 2012. In both instances, we are having issues installing with Group Policy. So, through Group Policy (Windows 2008 R2 Active Directory), we are running a script on computer boot through the domain network to install with System rights. The System Rights are the highest level which, of course, all scripts run through but we are receiving the following error from the log: Overall summary: Final result: Failed: see details below Exit code (Decimal): -2067922934 Exit facility code: 1214 Exit error code: 10 Exit message: The account that is running SQL Server Setup does not have one or all of the following rights: the right to back up files and directories, the right to manage auditing and the security log and the right to debug programs. To continue, use an account with both of these rights. For more information, see http://msdn.microsoft.com/en-us/library/ms813696.aspx, http://msdn.microsoft.com/en-us/library/ms813959.aspx and http://msdn.microsoft.com/en-us/library/ms813847.aspx. Start time: 2013-09-30 18:39:56 End time: 2013-09-30 18:41:12 Requested action: RunRules Machine Properties: Machine name: JPETERSON Machine processor count: 4 OS version: Windows 7 OS service pack: Service Pack 1 OS region: United States OS language: English (United States) OS architecture: x64 Process architecture: 32 Bit OS clustered: No Product features discovered: Product Instance Instance ID Feature Language Edition Version Clustered Package properties: Description: Microsoft SQL Server 2012 ProductName: SQL Server 2012 Type: RTM Version: 11 Installation location: C:\30985f2f86e6df75d6\x86\setup\ Installation edition: Express Slipstream: True User Input Settings: ACTION: RunRules CONFIGURATIONFILE: ENU: true FEATURES: SQLENGINE, CONN HELP: false IACCEPTSQLSERVERLICENSETERMS: true INDICATEPROGRESS: false INSTANCENAME: BRYANRES PID: ***** QUIET: true QUIETSIMPLE: false RULES: GlobalRules UIMODE: AutoAdvance X86: false Configuration file: C:\Program Files (x86)\Microsoft SQL Server\110\Setup Bootstrap\Log\20130930_183921\ConfigurationFile.ini Rules with failures: Global rules: There are no scenario-specific rules. Rules report file: C:\Program Files (x86)\Microsoft SQL Server\110\Setup Bootstrap\Log\20130930_183921\ SystemConfigurationCheck_Report.htm Exception summary: The following is an exception stack listing the exceptions in outermost to innermost order Inner exceptions are being indented Exception type: Microsoft.SqlServer.Configuration.RulesEngineExtension.RulesEngineRuleFailureException Message: The account that is running SQL Server Setup does not have one or all of the following rights: the right to back up files and directories, the right to manage auditing and the security log and the right to debug programs. To continue, use an account with both of these rights. For more information, see http://msdn.microsoft.com/en-us/library/ms813696.aspx, http://msdn.microsoft.com/en-us/library/ms813959.aspx and http://msdn.microsoft.com/en-us/library/ms813847.aspx. HResult : 0x84be000a FacilityCode : 1214 (4be) ErrorCode : 10 (000a) Data: SQL.Setup.FailureCategory = RuleViolationFailure DisableWatson = true Stack: at Microsoft.SqlServer.Configuration.RulesEngineExtension.RunRulesAction.ExecuteAction(String actionId) at Microsoft.SqlServer.Chainer.Infrastructure.Action.Execute(String actionId, TextWriter errorStream) at Microsoft.SqlServer.Setup.Chainer.Workflow.ActionInvocation.ExecuteActionHelper(TextWriter statusStream, ISequencedAction actionToRun, ServiceContainer context) If we log in as "Administrator", there is no issue installing. The issue is only when we try to run the script through Group Policy. This seems to happen often, specifically on Win 7 Enterprise/Pro 64-bit machines. I cannot tell you yet if there are issues on the Win 8 machines. Any ideas on how to fix or get around this issue without manual intervention i.e. logging in and doing a manual install? Thank you for your time.
sql-server-2008-r2installation
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

·
sqlaj 1 avatar image
sqlaj 1 answered
According to the error, the account doesn't have the permissions. >"The account that is running SQL Server Setup does not have one or all of the following rights: the right to back up files and directories, the right to manage auditing and the security log and the right to debug programs. To continue, use an account with both of these rights." Do you know what account is used to run the Group Policy? Can you elevate the permissions of that account? Have you investigated using a different account with higher permissions?
3 comments
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

scottf3a avatar image scottf3a commented ·
Thank you for your reply. Group Policy uses the "System" account which is higher on the local level than any other account, including Administrator. That's how all scripts are installed through Group Policy to domain computers. Since the "System" account has complete permissions, one should not have to expressly give these permissions to the account. This procedure worked fine with 2005 and earlier but with 2008 R2 and 2012, it is not working.
0 Likes 0 ·
sqlaj 1 avatar image sqlaj 1 commented ·
We don't install with Group Policy so I am not aware of the setup/configuration. You mention "System account" but from the machine you are running from, right? Not the one you are installing on? They would be different accounts. System usually doesn't have access to other servers, it's local. The error indicates permissions issues. There is something going on there. That is where I would start. Have you looked at the links provided in the error message?
0 Likes 0 ·
scottf3a avatar image scottf3a sqlaj 1 commented ·
Yes. There simply doesn't seem to be an answer for this one and I'm surprised others haven't run into this as well. All scripts automatically inherit and use the "System" account rights (which has every right) for the local machine the program is being installed on. The Domain Group Policy handles the network connection through "Computer", not "User" GP. If we log on as Administrator, the installation manually is fine. The only work around that I can think of is to have the User log on first with Admin rights and manually install it. This, however, gets us away from being able to install SQL by pushing the program from the DC. There is that workaround but again, gets us away from what we really want to do and how it should really work. :( I'm still hoping someone has found the reason why it's failing due to permissions when it's already at the top of the hierarchy.
0 Likes 0 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.