Restore access for sql service accounts

Hello,
due to massive errors on one server having SQL 2005 installed, I was forced
to reset the group policies to initial settings (installation settings) usin
g
the gpo fix command of the support tools.
Unfortunately, all service accounts of sql are not running anylonger, I
assume the ahtorisation was reset to an initial value I don't know of.
Is there any tool available or repair functionalty available which will
reset the initial sql server account policies which will be installed during
SQL 2005 setup?
Yours
StephanHi Stephan.
SQL Server grant the need rights when you change the service account, so the
easiest way is to change services to start with the LocalService account an
then, change them again to the service accounts.
Regards
Antonio Soto
Solid Quality Learning
http://www.sqlu.com
Disclaimer: This communication is an original work and represents my sole
views on the subject. It does not represent the views of any other person
or entity either by inference or direct reference.
"Stephan Hofmann" <StephanHofmann@.discussions.microsoft.com> escribi en el
mensaje news:44568C5E-D332-4F77-BB66-02BA8BDD47A7@.microsoft.com...
> Hello,
> due to massive errors on one server having SQL 2005 installed, I was
> forced
> to reset the group policies to initial settings (installation settings)
> using
> the gpo fix command of the support tools.
> Unfortunately, all service accounts of sql are not running anylonger, I
> assume the ahtorisation was reset to an initial value I don't know of.
> Is there any tool available or repair functionalty available which will
> reset the initial sql server account policies which will be installed
> during
> SQL 2005 setup?
> Yours
> Stephan|||Hello,
I have changed to localservice account, started the service, the service was
able to launch and finally I have set back to the previous service account.
Nothing changed.
I still believe the authorisation has changed for my preconfigured service
accounts.
By the way: the MSSQLADhelper service cannot be launched as well, is coming
with an other error. I don't know if this service has to run or not. If yes,
is there any issue known and reported? Thsi service is also not running on
another local SQL installation but there the SQL database is running using
local computer accounts (not LocalService). I don't know the dependencies of
service MSSQLadhelper.
Yours
Stephan
"Antonio Soto" wrote:

> Hi Stephan.
> SQL Server grant the need rights when you change the service account, so t
he
> easiest way is to change services to start with the LocalService account a
n
> then, change them again to the service accounts.
> Regards
>
> --
> Antonio Soto
> Solid Quality Learning
> http://www.sqlu.com
> Disclaimer: This communication is an original work and represents my sole
> views on the subject. It does not represent the views of any other person
> or entity either by inference or direct reference.
> "Stephan Hofmann" <StephanHofmann@.discussions.microsoft.com> escribió en
el
> mensaje news:44568C5E-D332-4F77-BB66-02BA8BDD47A7@.microsoft.com...
>
>|||You don't run MSSQLServerADHelper. Leave start up type set
to manual and running state at stopped - SQL Server does
the rest. The ADHelper service runs when requested to by SQL
Server service or Analysis Server service and then stops the
service when it has completed its work.
-Sue
On Tue, 11 Apr 2006 13:21:03 -0700, Stephan Hofmann
<StephanHofmann@.discussions.microsoft.com> wrote:
[vbcol=seagreen]
>Hello,
>I have changed to localservice account, started the service, the service wa
s
>able to launch and finally I have set back to the previous service account.
>Nothing changed.
>I still believe the authorisation has changed for my preconfigured service
>accounts.
>By the way: the MSSQLADhelper service cannot be launched as well, is coming
>with an other error. I don't know if this service has to run or not. If yes
,
>is there any issue known and reported? Thsi service is also not running on
>another local SQL installation but there the SQL database is running using
>local computer accounts (not LocalService). I don't know the dependencies o
f
>service MSSQLadhelper.
>
>Yours
>Stephan
>
>"Antonio Soto" wrote:
>|||Hello,
thanks for the good hint. Ok, I have changed nothing on ADhelper but what's
about my origin problem around the unability to launch any service account
with domain user accounts? How can I reestablish the service accounts? Are
there policies / Security settings which can be reset by a tool? What can I
check on my side to scope the error? (something like a check list?)
Thanks
Stephan.|||X-Newsreader: Forte Agent 2.0/32.652
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Newsgroups: microsoft.public.sqlserver.security
NNTP-Posting-Host: c-71-56-205-87.hsd1.co.comcast.net 71.56.205.87
Path: TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
Lines: 1
Xref: TK2MSFTNGP01.phx.gbl microsoft.public.sqlserver.security:28281
The necessary permissions, rights for service accounts are
listed in the following article:
How to change the SQL Server or SQL Server Agent service
account without using SQL Enterprise Manager in SQL Server
2000 or SQL Server Management Studio in SQL Server 2005
http://support.microsoft.com/?id=283811
-Sue
On Wed, 12 Apr 2006 01:21:01 -0700, Stephan Hofmann
<StephanHofmann@.discussions.microsoft.com> wrote:

>Hello,
>thanks for the good hint. Ok, I have changed nothing on ADhelper but what's
>about my origin problem around the unability to launch any service account
>with domain user accounts? How can I reestablish the service accounts? Are
>there policies / Security settings which can be reset by a tool? What can I
>check on my side to scope the error? (something like a check list?)
>Thanks
>Stephan.