1

Recently when I created a SQL Server Agent(2008) job to execute a SSIS package with proxy account, it failed with the below error message. What is this exception about? What causes it and how do I resolve it?

Error Message Executed as user: blaw. The process could not be created for step 1 of job 0xD5A5 (reason: A required privilege is not held by the client). The step failed.

Note:-It is working fine with Agent Service account.

Thanks

rmdussa
  • 1,549
  • 10
  • 27
  • 50

3 Answers3

0

Just worked through this issue and came to a different resolution. A global security policy was getting in the way. It turns out the development server that was presenting this issue accidentally had a much more restrictive policy being applied than the production counterpart that was working fine. Not exactly sure which overridden permission under the policy was causing the issue, but a less restrictive policy resolved the issue nonetheless. Basically, check with your Active Directory admin if the Local Security Policy is locked down on the server presenting the issue.

Originsnone
  • 1
0

I am trying to get this to work right now as well. You try looking at these resources?

http://support.microsoft.com/kb/918760

http://technet.microsoft.com/en-us/library/dd440761(SQL.100).aspx

http://technet.microsoft.com/en-us/sqlserver/ff686764.aspx

Christopher Rathermel
  • 915
  • 12
  • 30
  • Still have not get succeed,same error persists. Do not know where was the mistake. – rmdussa Dec 14 '10 at 05:15
  • Package is Successfully ran with Service Agent Account. When I created proxy it is failing before attempting to execute the package. So Definetly problem with Proxy account. Even I tried with same account as service account in Proxy account still it did not work. Any help. Thanks in Advance – rmdussa Dec 16 '10 at 00:06
  • Make sure your proxy account has access to all of your datasources like a network path for an excel file or access to all of your databases you are pulling from or writing to. – Christopher Rathermel Dec 22 '10 at 19:02
0

You've not mentioned exactly how you're authenticating, but regardless, here's a script for creating a login, credential and proxy and granting permissions to SSIS packages:

CREATE LOGIN [MyLogin] FROM WINDOWS WITH DEFAULT_DATABASE=[master], DEFAULT_LANGUAGE=[us_english]
GO

GRANT CONNECT TO [MyLogin]
go

CREATE ROLE MyRole
GO

EXEC sp_addrolemember @membername = N'MyLogin', @rolename = N'MyRole'
GO

CREATE CREDENTIAL MyCredential WITH IDENTITY = 'MyLogin', SECRET = 'MyPassword';

GO

USE [msdb]
GO

EXEC msdb.dbo.sp_add_proxy @proxy_name=N'MyProxy',@credential_name=N'MyCredential', 
        @enabled=1
GO

EXEC msdb.dbo.sp_grant_proxy_to_subsystem @proxy_name=N'MyProxy', @subsystem_id=11
GO

EXEC msdb.dbo.sp_grant_login_to_proxy @proxy_name=N'MyProxy', @login_name=N'MyLogin'
GO


CREATE ROLE MyRole
GO

EXEC sp_addrolemember @membername = N'MyRole', @rolename = N'db_ssisadmin'
GO

EXEC sp_addrolemember @membername = N'MyRole', @rolename = N'db_ssisoperator'
GO

EXEC sp_addrolemember @membername = N'MyLogin', @rolename = N'MyRole'
GO
BigMomma
  • 338
  • 2
  • 14