Hi John,
I got one step further. With SQL server 2005 SP1 running, I could start and
stop the instance MSSMLBIZ as a Network service. No error messages.
Following the suggestion in one of the threads, I switched the instance to
LOCAL SYSTEM. Now I could update to SP2. Good news so far.
When now trying to switch the instance back to NETWORK SERVICE, it failed
starting with the error messages "Cannot find object or property.
[0x80092004]" or a message stating "The request failed or the service did not
respond in a timely fashion. Consult the event log or other applicable error
logs for details."
Below the ERRORLOG file content.
When investigating into these error messages, it is suggested that a
certificate might be missing, but where could I know from which authority and
the registry location mentioned in the articles for Windows server 2003 and
Windows 2000 does not exist for me (WinXP).
Any ideas?
Martti
ERRORLOG:
2007-12-29 02:43:23.07 Server Microsoft SQL Server 2005 - 9.00.3042.00
(Intel X86)
Feb 9 2007 22:47:07
Copyright (c) 1988-2005 Microsoft Corporation
Express Edition on Windows NT 5.1 (Build 2600: Service Pack 2)
2007-12-29 02:43:23.07 Server (c) 2005 Microsoft Corporation.
2007-12-29 02:43:23.07 Server All rights reserved.
2007-12-29 02:43:23.07 Server Server process ID is 6812.
2007-12-29 02:43:23.07 Server Authentication mode is WINDOWS-ONLY.
2007-12-29 02:43:23.07 Server Logging SQL Server messages in file
'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG'.
2007-12-29 02:43:23.07 Server This instance of SQL Server last reported
using a process ID of 7320 at 12/29/2007 2:33:07 AM (local) 12/29/2007
1:33:07 AM (UTC). This is an informational message only; no user action is
required.
2007-12-29 02:43:23.07 Server Registry startup parameters:
2007-12-29 02:43:23.07 Server -T 840
2007-12-29 02:43:23.07 Server -T 2324
2007-12-29 02:43:23.07 Server -l C:\Program Files\Microsoft SQL
Server\MSSQL.1\MSSQL\DATA\mastlog.ldf
2007-12-29 02:43:23.07 Server -e C:\Program Files\Microsoft SQL
Server\MSSQL.1\MSSQL\LOG\ERRORLOG
2007-12-29 02:43:23.07 Server -d C:\Program Files\Microsoft SQL
Server\MSSQL.1\MSSQL\DATA\master.mdf
2007-12-29 02:43:23.10 Server SQL Server is starting at normal priority
base (=7). This is an informational message only. No user action is required.
2007-12-29 02:43:23.10 Server Detected 2 CPUs. This is an informational
message; no user action is required.
2007-12-29 02:43:23.10 Server Error: 8319, Severity: 16, State: 1.
2007-12-29 02:43:23.10 Server Windows kernel object
'Global\SQL_90_MEMOBJ_MSSMLBIZ_0' already exists. It's not owned by the SQL
Server service account. SQL Server performance counters are disabled.
2007-12-29 02:43:23.12 Server Error: 3409, Severity: 16, State: 1.
2007-12-29 02:43:23.12 Server Performance counter shared memory setup
failed with error -1. Reinstall sqlctr.ini for this instance, and ensure that
the instance login account has correct registry permissions.
2007-12-29 02:43:23.62 Server Using dynamic lock allocation. Initial
allocation of 2500 Lock blocks and 5000 Lock Owner blocks per node. This is
an informational message only. No user action is required.
2007-12-29 02:43:23.64 Server The time stamp counter of CPU on
scheduler id 1 is not synchronized with other CPUs.
2007-12-29 02:43:23.64 Server Database mirroring has been enabled on
this instance of SQL Server.
2007-12-29 02:43:23.64 spid5s Starting up database 'master'.
2007-12-29 02:43:23.79 spid5s 1 transactions rolled forward in database
'master' (1). This is an informational message only. No user action is
required.
2007-12-29 02:43:23.90 spid5s 0 transactions rolled back in database
'master' (1). This is an informational message only. No user action is
required.
2007-12-29 02:43:23.90 spid5s Recovery is writing a checkpoint in
database 'master' (1). This is an informational message only. No user action
is required.
2007-12-29 02:43:23.93 spid5s SQL Trace ID 1 was started by login "sa".
2007-12-29 02:43:23.95 spid5s Starting up database 'mssqlsystemresource'.
2007-12-29 02:43:23.98 spid5s The resource database build version is
9.00.3042. This is an informational message only. No user action is required.
2007-12-29 02:43:24.31 spid5s Server name is 'MN-ARTIOS\MSSMLBIZ'. This
is an informational message only. No user action is required.
2007-12-29 02:43:24.31 spid7s Starting up database 'model'.
2007-12-29 02:43:24.31 spid5s Starting up database 'msdb'.
2007-12-29 02:43:24.35 Server Error: 17190, Severity: 16, State: 1.
2007-12-29 02:43:24.35 Server FallBack certificate initialization
failed with error code: 1.
2007-12-29 02:43:24.35 Server Unable to initialize SSL encryption
because a valid certificate could not be found, and it is not possible to
create a self-signed certificate.
2007-12-29 02:43:24.35 Server Error: 17182, Severity: 16, State: 1.
2007-12-29 02:43:24.35 Server TDSSNIClient initialization failed with
error 0x80092004, status code 0x80.
2007-12-29 02:43:24.35 Server Error: 17182, Severity: 16, State: 1.
2007-12-29 02:43:24.35 Server TDSSNIClient initialization failed with
error 0x80092004, status code 0x1.
2007-12-29 02:43:24.39 Server Error: 17826, Severity: 18, State: 3.
2007-12-29 02:43:24.39 Server Could not start the network library
because of an internal error in the network library. To determine the cause,
review the errors immediately preceding this one in the error log.
2007-12-29 02:43:24.39 Server Error: 17120, Severity: 16, State: 1.
2007-12-29 02:43:24.39 Server SQL Server could not spawn FRunCM thread.
Check the SQL Server error log and the Windows event logs for information
about possible related problems.
> Hi Martti
>
[quoted text clipped - 239 lines]
> > > > is disabled or not configured.
> > > > 2007-12-27 17:52:13.76 spid11s Service Broker manager has started.
John Bell - 29 Dec 2007 11:49 GMT
Hi Martti
It is possibly the privileges for the certificate have not been granted for
the certificate. Did you check configuration manager to see if you are using
SSL? Have you conneced to the instance using SQLCMD and see if you can, can
you access the databases?
You should only need to change the service account from local system if you
require to do anything that local system is not privileged to do.
http://msdn2.microsoft.com/en-us/library/ms143170.aspx lists possible options
for the service account and Network Service is not recommended if you can use
a User Account or Local System do so.
Your current error message looks again like permissions the only thing I can
find is at http://tinyurl.com/2279va which indicates that you need to give
the service account access to the registry key although this is not a
Microsoft Fix.
John
> Hi John,
>
[quoted text clipped - 277 lines]
> > > > > Copyright (c) 1988-2005 Microsoft Corporation
> > > > > Express Edition on Windows NT 5.1 (Build 2600: Service Pack 2)
finntiger - 29 Dec 2007 22:36 GMT
Hi John,
I checked the privileges and they seem to be ok, the instance has read
permission.
I couldn't find out how to check if I'm using SSL. I can only guess that
yes, as the ERRORLOG says "...unable to initialize SSL encryption...".
I tried to connect with the sqlcmd command but failure again.
Well, in the end I'll let the service run as Local System and if later I
encounter problems I can still spend another three nights fixing registries
and other stuff I don't really understand.
Thanks for your help!
Martti
> Hi Martti
>
[quoted text clipped - 277 lines]
> > > > > > C:\Program Files\Microsoft SQL Server\90\Setup
> > > > > > Bootstrap\LOG\Files\SQLSetup0007_MN-ARTIOS_SQL.log
John Bell - 30 Dec 2007 14:20 GMT
Hi
You can check SSL encryption in the protocols section of configuration
manager. Check http://technet.microsoft.com/en-us/library/ms189067.aspx for
more detail.
John
> Hi John,
>
[quoted text clipped - 380 lines]
>> > > > > > C:\Program Files\Microsoft SQL Server\90\Setup
>> > > > > > Bootstrap\LOG\Files\SQLSetup0007_MN-ARTIOS_SQL.log
finntiger - 30 Dec 2007 20:12 GMT
Hi again,
well, I had found the article about encryption as well, but in my list of
protocols only "shared memory" is enabled, all other protocols "named pipes",
"TCP/IP" and "VIA" are disabled. In neither of the protocols there is a
"certificate" tab, nor have I found any other information or choice regarding
encryption there. No "flag" tabs neither...
Whats wrong???
Martti
> Hi
>
[quoted text clipped - 274 lines]
> >> > > > >
> >> > > > > > Hello,