failed login attempts by service account

Biltz 131 Reputation points
2021-01-19T05:28:02.163+00:00

Hello,

I have recently upgraded SQLServer2016 to SQLServer2019 on a new hardware. I am getting many failed login attempts by SQL Server agent Service account.

Login failed for user 'DOMAIN\Agent Account'. Reason: Could not find a login matching the name provided. [CLIENT: <local machine>]

I could not find why the SQL Server agent account is trying to login ?

Please help.

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
12,907 questions
0 comments No comments
{count} votes

Accepted answer
  1. CathyJi-MSFT 21,096 Reputation points Microsoft Vendor
    2021-01-19T09:00:59.017+00:00

    Hi @Biltz ,

    I found a similar thread SQL Server - login failure every day at same time with the service account, the solution is that using an Extended Events session to find the reason for his issue. Please read the thread to get more detail information.

    Best regards,
    Cathy


    If the response is helpful, please click "Accept Answer" and upvote it, thank you.

    1 person found this answer helpful.
    0 comments No comments

4 additional answers

Sort by: Most helpful
  1. Martin Cairney 2,241 Reputation points
    2021-01-19T06:46:48.657+00:00

    When the SQL Agent service starts, it has to connect to the SQL Server service since the meta data for Jobs etc is always stored in the MSDB database.

    That is why you are seeing the connection attempts.

    0 comments No comments

  2. tibor_karaszi@hotmail.com 4,306 Reputation points
    2021-01-19T07:13:32.4+00:00

    Correct. Agent has to be able to login to its SQL Server, and it uses Windows authentication. Also, it has to be sysadmin. If not, Agent will immediately stop.

    0 comments No comments

  3. Biltz 131 Reputation points
    2021-01-19T07:20:04.247+00:00

    First thing is i am getting these login failed message everyday not on the restarts..

    second thing is i am not getting these messages for all the instance in this cluster, just for few instances.

    How can stop these messages appearing in SQL Server Error log?

    0 comments No comments

  4. tibor_karaszi@hotmail.com 4,306 Reputation points
    2021-01-19T07:35:10.493+00:00

    First step is to make sure that the service account for Agent does have a login in SQL server and that this login is member of the sysadmin server role.

    0 comments No comments