Share via

failed login attempts by service account

Biltz 131 Reputation points
2021-01-19T05:28:02.163+00:00

Hello,

I have recently upgraded SQLServer2016 to SQLServer2019 on a new hardware. I am getting many failed login attempts by SQL Server agent Service account.

Login failed for user 'DOMAIN\Agent Account'. Reason: Could not find a login matching the name provided. [CLIENT: <local machine>]

I could not find why the SQL Server agent account is trying to login ?

Please help.

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,361 questions
0 comments
Accepted answer
  1. CathyJi-MSFT 21,131 Reputation points Microsoft Vendor
    2021-01-19T09:00:59.017+00:00

    Hi @Biltz ,

    I found a similar thread SQL Server - login failure every day at same time with the service account, the solution is that using an Extended Events session to find the reason for his issue. Please read the thread to get more detail information.

    Best regards,
    Cathy

    If the response is helpful, please click "Accept Answer" and upvote it, thank you.

    1 person found this answer helpful.
    0 comments

4 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Martin Cairney 2,246 Reputation points
    2021-01-19T06:46:48.657+00:00

    When the SQL Agent service starts, it has to connect to the SQL Server service since the meta data for Jobs etc is always stored in the MSDB database.

    That is why you are seeing the connection attempts.

    0 comments
  2. tibor_karaszi@hotmail.com 4,306 Reputation points
    2021-01-19T07:13:32.4+00:00

    Correct. Agent has to be able to login to its SQL Server, and it uses Windows authentication. Also, it has to be sysadmin. If not, Agent will immediately stop.

    0 comments
  3. Biltz 131 Reputation points
    2021-01-19T07:20:04.247+00:00

    First thing is i am getting these login failed message everyday not on the restarts..

    second thing is i am not getting these messages for all the instance in this cluster, just for few instances.

    How can stop these messages appearing in SQL Server Error log?

    0 comments
  4. tibor_karaszi@hotmail.com 4,306 Reputation points
    2021-01-19T07:35:10.493+00:00

    First step is to make sure that the service account for Agent does have a login in SQL server and that this login is member of the sysadmin server role.

    0 comments