Share via

WSUS SQL permissions

Stephen Skwierawski 36 Reputation points
2022-01-18T23:06:36.587+00:00

Hi , I have a standalone WSUS server in a workgroup - I've attempted to migrate the WID database to a standard SQL server but am having connection issues.

One of the steps on the migration document ( https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/manage/wid-to-sql-migration#detach-susdb-from-the-windows-internal-database ) is to add the server name and domain as a security login [FQDN][WSUSComputerName]$ however the WSUS server is not on a domain but rather a workgroup and I can't add this entry in.

Without this i am seeing the error below when connecting to the SQL server from the WSUS server process and the WSUS console doesn't load.

Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Could not find a login matching the name provided. [CLIENT:CLIENTIP )

Am I missing a permission here ?

Windows for business | Windows Server | User experience | Other
0 comments

Answer accepted by question author

Adam J. Marshall 10,786 Reputation points MVP
2022-01-19T02:46:14.573+00:00

And if you were going to say that the link provided was for the WID only...

You cannot run the SQL Server service under a local non-system account or by using SQL Server authentication. WSUS supports Windows authentication only.

https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#wsus-with-sql-server

Was this answer helpful?

0 comments

6 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Stephen Skwierawski 36 Reputation points
    2022-01-19T03:03:30.923+00:00

    Thank you the links are at least helpful to understand the official stance. A similar post while old here https://blog.vittoriopavesi.com/2006/02/wsus-with-sql-authentication.html?m=1 again references the same keys. I will mark your answer correct though.

    Was this answer helpful?

    1 person found this answer helpful.
  2. Adam J. Marshall 10,786 Reputation points MVP
    2022-01-19T00:36:11.733+00:00

    Read Lawrence's response.

    Security implications for the very least.

    Was this answer helpful?

  3. Adam J. Marshall 10,786 Reputation points MVP
    2022-01-19T00:12:26.713+00:00

    No it is not.

    Was this answer helpful?

  4. Adam J. Marshall 10,786 Reputation points MVP
    2022-01-18T23:11:47.487+00:00

    WSUS in Workgroup mode, CANNOT use a dedicated Remote SQL Server and must use the WID. You can use a LOCAL SQL Server though.

    The reason: WSUS only supports Windows Authentication. Windows Authentication can't happen across workgroup nodes.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.