2

Attempting to install SQL Server 2008 R2, Standard, Developer Edition, and/or Express on Windows 7 Enterprise, I keep getting 'Access is denied' at the very end of the installation. Contents of log:

Configuration error code: 0xDC80C325

Configuration error description: Access is denied

I've tried these suggestions with no success :

SQL Server 2008 Access Denied

SQL 2008 install on Windows Server 2008 Permission Denied errors r-2008-permission-denied-errors

http://support.microsoft.com/kb/2000257

Even our system administrator logging in as the local machine administrator is unable to complete the installation or give rights to/change the local debug policy (as suggested in the above links).

Thanks for any information.

Community
  • 1
KevinRF
  • 123
  • 1
  • 1
  • 4

3 Answers3

3

Here is a solution for this.

This failure often is caused by a system or domain policy removing the SeDebugPrivelege security privilege from the administrator account running setup. Verify that the account running has this privilege.

The AccessChk tool will print all privleges for an account (http://technet.microsoft.com/en-us/sysinternals/bb664922.aspx) by running: accesschk.exe -a \ *

Alternatively, we can check this through your group policy editor as mentioned below:

Open Group Policy... Start | Run | Type: gpedit.msc | OK | Navigate to Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Debug programs

The account through which we are trying to run the setup should be here ( besides the local admin on that machine). I included that here, restarted the server ( this is mandatory, gpupdate /force will not work) and ran the setup and it was successful this time.

SQL Server 2008 setup needs this privilege to start up the SQL Server process and listen to an event that signals back to setup that SQL Server successfully started.

Ankur Dholakiya
  • 458
  • 2
  • 9
  • 1
    Already suggested in the links I included in the question. The 'Debug program Properties' dialog box/Local Security Settings tab is empty and the button to 'Add User or Group...' is disabled. Our sysadmin has no idea what is needed to fix the issue. Hence the question to serverfault.com – KevinRF Dec 14 '10 at 14:15
  • Another sysadmin 'discovered' the group policy being pushed down preventing the installation. Once the debug permission was added, tada...installation worked like a champ. – KevinRF Dec 20 '10 at 13:34
  • This worked for me, too! – James Sun Aug 18 '15 at 18:20
1

Please use the utility from the below URL to investigate the issue:

http://technet.microsoft.com/en-us/sysinternals/bb664922.aspx

Gaurav Singh
  • 497
  • 2
  • 13
  • Thank you for the quick response. The results are (for my account) SeBackupPrivilege and SeSecurityPrivilege. Executing the command on the admin account doesn't have the SeDebugPrivilege and the ability to set the option is grayed out. – KevinRF Dec 13 '10 at 19:51
  • Can you please provide me the Exact error from Eventvwr – Gaurav Singh Dec 13 '10 at 20:11
  • There isn't any meaningful data in the event viewer other than where the install logged the error details file. The file is over 21,000 lines. The first error: Configuration action failed for feature SQL_Engine_Core_Inst during timing ConfigRC and scenario ConfigRC. Access is denied – KevinRF Dec 13 '10 at 21:14
  • Open Group Policy... Start | Run | Type: gpedit.msc | OK | Navigate to Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Debug programs – Gaurav Singh Dec 13 '10 at 21:28
  • an you verify the permissions in regedit on the branches mentioned above? They are: HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Uninstall\ HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\ – Gaurav Singh Dec 13 '10 at 21:28
  • Hence the reason for the question to ServerFault. The ability to add users is disabled (already suggested in the links provided above). Even for our sysadmin logging in as a local machine administrator. – KevinRF Dec 13 '10 at 21:33
  • Another sysadmin 'discovered' the group policy being pushed down preventing the installation. Once the debug permission was added, installation worked like a champ. I guess being a persistent jerk sometimes pays off (daily emails, numerous office walk-ins). I suspected they knew all along what the problem was and hoped I would give up and use Access. – KevinRF Dec 20 '10 at 13:38
1

Do you have User Access Control turned on? If UAC is on then even members of the Administrators group don't have the same access as the Administrator account. You have to either turn UAC off or log on as Administrator.

Ankur Dholakiya
  • 458
  • 2
  • 9
  • As suggested in the links I included in the question, UAC is turned off and the set up is executed as an administrator. – KevinRF Dec 14 '10 at 13:47