I built a brand new Standard Server 2012 SP1 virtual machine in a VMWare 5.1 clustered environment. No problems with the server itself. No errors, no issues. I patched to SP1 with all the latest KB's. I start the installation of SQL 2012 Standard. Install goes fine. I set up domain service accounts to run the server and agent on, set them up as administrators on the box. At the end of the installation it can't start the services. SQL Server Agent wont start. SQL Server wont start... I am logged in as a domain admin.
There is NOTHING else installed on this server, not even antivirus.
"Windows could not start the SQL Server (MSSQLSERVER) service on local computer. Error 5: Access is denied."
I found a posting about someone having a similar issue Here. There was something about permissions of the guest in VMWare. The fix for them was "changing all of the sql server services to log on as local system" which is NOT an option for me. I did change permissions on the SQL install folder, and that didn't help.
So I wrapped up the installation....
Tried to start the service and got the above error. Here is the event: (Sanitized for your protection)
Log Name: System
Source: Service Control Manager
Date: 3/4/2013 4:16:34 PM
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ComputerName.Domain
Description:
The SQL Server (MSSQLSERVER) service failed to start due to the following error:
Access is denied.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2013-03-04T22:16:34.412450700Z" />
<EventRecordID>1921</EventRecordID>
<Correlation />
<Execution ProcessID="508" ThreadID="2348" />
<Channel>System</Channel>
<Computer>ComputerName.Domain</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">SQL Server (MSSQLSERVER)</Data>
<Data Name="param2">%%5</Data>
<Binary>4D005300530051004C005300450052005600450052000000</Binary>
</EventData>
</Event>
Just before this in the security logs (When I tried to start the service:)
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 3/4/2013 4:15:19 PM
Event ID: 4656
Task Category: File System
Level: Information
Keywords: Audit Failure
User: N/A
Computer: ComputerName.Domain
Description:
A handle to an object was requested.
Subject:
Security ID:
DOMAIN\MyUserID
Account Name:
MyUserID
Account Domain:FNTS
Logon ID:
0xC86050
Object:
Object Server:Security
Object Type:
File
Object Name:
C:\Windows\System32\services.msc
Handle ID:
0x0
Resource Attributes:-
Process Information:
Process ID:
0xfdc
Process Name:
C:\Windows\System32\mmc.exe
Access Request Information:
Transaction ID:{00000000-0000-0000-0000-000000000000}
Accesses:
READ_CONTROL
SYNCHRONIZE
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes
Access Reasons:READ_CONTROL:Granted byD:(A;;0x1200a9;;;BA)
SYNCHRONIZE:
Granted byD:(A;;0x1200a9;;;BA)
WriteData (or AddFile):Not granted
AppendData (or AddSubdirectory or CreatePipeInstance):Not granted
WriteEA:
Not granted
ReadAttributes:Granted by ACE on parent folderD:(A;;0x1301bf;;;BA)
WriteAttributes:Not granted
Access Mask:
0x120196
Privileges Used for Access Check:-
Restricted SID Count:0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
<EventID>4656</EventID>
<Version>1</Version>
<Level>0</Level>
<Task>12800</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2013-03-04T22:15:19.640384100Z" />
<EventRecordID>1730094</EventRecordID>
<Correlation />
<Execution ProcessID="516" ThreadID="524" />
<Channel>Security</Channel>
<Computer>ComputerName.Domain</Computer>
<Security />
</System>
<EventData>
<Data Name="SubjectUserSid">S-1-5-21-1724424548-855808307-1441089987-1194</Data>
<Data Name="SubjectUserName">MyUserID</Data>
<Data Name="SubjectDomainName">DOMAIN</Data>
<Data Name="SubjectLogonId">0xc86050</Data>
<Data Name="ObjectServer">Security</Data>
<Data Name="ObjectType">File</Data>
<Data Name="ObjectName">C:\Windows\System32\services.msc</Data>
<Data Name="HandleId">0x0</Data>
<Data Name="TransactionId">{00000000-0000-0000-0000-000000000000}</Data>
<Data Name="AccessList">%%1538
%%1541
%%4417
%%4418
%%4420
%%4423
%%4424
</Data>
<Data Name="AccessReason">%%1538:%%1801D:(A;;0x1200a9;;;BA)
%%1541:
%%1801D:(A;;0x1200a9;;;BA)
%%4417:
%%1805
%%4418:
%%1805
%%4420:
%%1805
%%4423:
%%1811D:(A;;0x1301bf;;;BA)
%%4424:
%%1805
</Data>
<Data Name="AccessMask">0x120196</Data>
<Data Name="PrivilegeList">-</Data>
<Data Name="RestrictedSidCount">0</Data>
<Data Name="ProcessId">0xfdc</Data>
<Data Name="ProcessName">C:\Windows\System32\mmc.exe</Data>
<Data Name="ResourceAttributes">-</Data>
</EventData>
</Event>
"If at first you don't succeed, get a bigger hammer."