Results 1 to 7 of 7
  1. #1
    4 Star Lounger
    Join Date
    Jan 2002
    Location
    Brookings, South Dakota, USA
    Posts
    449
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Could not obtain information about Win NT group

    Hi All,
    I'm posting this here on the chance someone has seen this and it does have, at least a little, something to do with Win Server 2003.

    We've just recently changed/upgraded server boxes and went from Windows 2000 Server to Windows 2003 Server with SQLServer 2000 sp4 installed on both. The Startup Service Account settings for both SQLServer and SQLServer Agent is 'System Account'. On the original machine backups worked without a flaw, but with the new machine I receive the following error:

    <<error from SQL Agent Error log>>
    [298] SQLServer Error: 8198, Could not obtain information about Windows NT group/user 'DOMAINNAMEusername'.
    [SQLSTATE 42000] (ConnIsLoginSysAdmin)

    When remoted into the new machine with 'DOMAINNAMEusername' and doing an "exec xp_logininfo
    'DOMAINNAMEusername'" in Query Analyzer I get the same error as follows:

    <<error from Query Analyzer>>
    Server: Msg 8198, Level 16, State 24, Procedure xp_logininfo, Line 58
    Could not obtain information about Windows NT group/user 'DOMAINNAMEusername'.

    I've looked at kb241643 and kb834124 and realize there is a workaround, but this same account gets locked by AD at least a couple of times a day when I try and use it to login to this and/or other machines I administer (this account is an admin account used strictly for administration purposes, I have an individual account that I usefor my desktop and laptop). It seems to have begun shortly after I had to change the password for this account. I believe, the error and the lockout are related (my inexperience shows as I do not have anything concrete to make that assumption) so I would really like to know why this is happening and how to correct it.
    Thank you.

    gdr
    <IMG SRC=http://www.wopr.com/w3tuserpics/gdrezek_sig.jpg>
    "Those who dance are considered insane by those who can't hear the music" - George Carlin

  2. #2
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,572
    Thanks
    5
    Thanked 1,057 Times in 926 Posts

    Re: Could not obtain information about Win NT group

    I'd guess that you have some service, scheduled task, or remote access attempting to login using the old password. The account is being locked after the limit of attempts is exceeded.

    Joe
    Joe

  3. #3
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Could not obtain information about Win NT grou

    Although it is no solution, here's a resurrected NT4 BATch file from seven years ago which may assist...<pre>@echo off
    :: +----------+ test status of MYACCT every so often
    :: I UNLOCKME I and unlock the account if found locked
    :: +----------+ John Gray 10FEB1999
    echo %~n0 is intended to run continuously ...
    echo MYACCT was unlocked at the following times:
    :start
    :: is my account locked out?
    net user MYACCT /domain | find "Locked" >nul
    :: if not locked, just wait for a time interval to expire
    if errorlevel 1 goto waitabit
    :: put a time message on the screen
    for /f %%a in ('time /t') do echo MYACCT unlocked at %%a
    :: and set the account active again
    net user MYACCT /active /domain >nul
    :: then go immediately to test the status
    goto start
    :waitabit
    :: wait time where value is [number of seconds waited + 1]
    ping -n 58 127.0.0.1 > nul
    goto start</pre>

    Yes, If I had written it now it would have been much tidier, but, heh, that's progress!

    John
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  4. #4
    4 Star Lounger
    Join Date
    Jan 2002
    Location
    Brookings, South Dakota, USA
    Posts
    449
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Could not obtain information about Win NT group

    Hi Joe,
    <img src=/S/sorry.gif border=0 alt=sorry width=15 height=15> I completely forgot about this post.
    I suppose (hope) this will be a moot point here in the next couple of months as we will be going to sqlserver 2005 and it better work and play with Windows Server 2003 better than sqlserver 2000 has shown itself to be (from my point of view anyway). <img src=/S/smile.gif border=0 alt=smile width=15 height=15>
    The service angle is what we finally decided (not proved) it was, but with me in particular, I've got so much turned on and going on that it has been easier just to unlock me rather than track it down. I'm with University Networking Services, but I ain't no networker. Just a hacker who got into databases with Access, then SQL, then ASP with ADO (very, very soon .NET), then IIS, then a smattering of straight VB, then WMI (finally something to do with a network), then who knows, probably that Java stuff. <img src=/S/coffeetime.gif border=0 alt=coffeetime width=32 height=48>
    But, I'm nearly convinced it has been visual interdev 6.0 that has been the culprit in locking me out. I can't say for certain 'cause there are times, from the server logs, that state I've (the questionable username) made the changes and other times the IUSR account has made the changes. I'll remote into the sql machine with one username, but I'll use Enterprise Manager to access sql with still another username. So even if all the machines and services I'm attached to aren't confused, I normally am. <img src=/S/dizzy.gif border=0 alt=dizzy width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/gdrezek_sig.jpg>
    "Those who dance are considered insane by those who can't hear the music" - George Carlin

  5. #5
    4 Star Lounger
    Join Date
    Jan 2002
    Location
    Brookings, South Dakota, USA
    Posts
    449
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Could not obtain information about Win NT grou

    Hi John,
    <img src=/S/sorry.gif border=0 alt=sorry width=15 height=15> for exactly the same reason I gave Joe. I need a memory upgrade (a RAID 5 backup wouldn't be bad either) <img src=/S/smile.gif border=0 alt=smile width=15 height=15>
    Thanks for the BAT um-m-m, 'er-r-r Batch file. I've only just been able to glance at it but I do intend to put it to use, if for no other reason than to stop me from bothering the Domain Admins in order to unlock me. Maybe it sounds strange but I do NOT want those rights. <img src=/S/nope.gif border=0 alt=nope width=15 height=15> I've got way too many other irons in multiple fires. I don't need those headaches as well. <img src=/S/headthrob.gif border=0 alt=headthrob width=15 height=15>
    Besides, then I don't have to worry about being on call over week-ends either. <img src=/S/thumbup.gif border=0 alt=thumbup width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/gdrezek_sig.jpg>
    "Those who dance are considered insane by those who can't hear the music" - George Carlin

  6. #6
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Could not obtain information about Win NT grou

    What I probably should have said is that you need to run that BATch file from/in/under a Domain Admins (or similar) account (which I presumed you were!). Most users are not allowed to unlock their own accounts, unsurprisingly...

    John
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  7. #7
    4 Star Lounger
    Join Date
    Jan 2002
    Location
    Brookings, South Dakota, USA
    Posts
    449
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Could not obtain information about Win NT grou

    Hi John,
    Yeah, that would have been the proper assumption, but I do code for them and let them "take the heat" with their elevated rights. <img src=/S/evilgrin.gif border=0 alt=evilgrin width=15 height=15>
    I've been asked countless times if I would take those rights, but so far I've been able to dodge them. Let's hope my good fortune holds <img src=/S/crossfingers.gif border=0 alt=crossfingers width=17 height=16> and they let me keep my "mini-network" in my office so I don't have to have those rights.
    <IMG SRC=http://www.wopr.com/w3tuserpics/gdrezek_sig.jpg>
    "Those who dance are considered insane by those who can't hear the music" - George Carlin

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •