SSIS cannot access folders in UNC share after UNC share app server migrated to azure

ACDBA 416 Reputation points
2022-03-23T07:21:43.71+00:00

Hi All,

We have an application server 'A' that runs SSIS packages in database server B . App server A is migrated to azure. IAAS migration..just lift and shift. This app server A also holds files flat file shares which SQL Server SSIS needs to access. The application could run the packages without errors prior to migration. After migration packages are getting failed saying 'Access to the folder is denied.

SQL service account is given delegated permissions to file share server host in AD. Also, FS is granted permissions to SQL service accounts.

While troubleshooting, packages can be executed separately by SQL server agent job by using the proxy account. But packages cant be run when it's triggered from the application server using application codes

The database server can connect to other on-prem file shares without issues. it just not works with the migrated FS.

Can you guide how to troubleshoot this? Tried to run process monitor but couldn't capture.

OS-Windows 2008 ENT
SQL-SQL 2008 ENT
Migration-->lift and shift IAAS..only host IP changed in application server.

Thanks,
ACDBA

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,363 questions
SQL Server Integration Services
SQL Server Integration Services
A Microsoft platform for building enterprise-level data integration and data transformations solutions.
2,525 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Olaf Helper 43,246 Reputation points
    2022-03-23T07:54:06.273+00:00

    After migration packages are getting failed saying 'Access to the folder is denied.

    A clear error message, it's a permissions issue.
    If the Job with a proxy acount can access, but not the application, then because the app runs under an other security context (different account). You have to grant permissions for that different account as well.

    1 person found this answer helpful.