07-11-06 06:25 PM
mj,
I have also seen this problem with the two hop issue, and in my reading
we found one solution that fit exactly for our problem.
The requirements art
you have two hops
you are using Active Directory (machines are members of a domain)
If so, you can try turning on the "Trusted for Delegation" flag on each
of the servers in the Active Directory to allow the calling computers
security context to be flowed from the calling server, through the
intermediate server to the SQL server.
This option is disabled by default.
Steps to Mark the Computer Account "Trusted for Delegation"
If the server process is running under a system account, the principal
account is the computer account in the Active Directory. Therefore, you
must make sure that you select the Trusted for delegation check box for
the computer account in the Active Directory. To do this, follow these
steps: 1. On the Domain controller, click Start, point to Programs,
point to Administrative Tools, and click Active Directory Users and
Computers.
2. Under your domain, click the Computers folder.
3. Under your computer account, click Properties.
4. On the General tab, select the Trusted for delegation check box.
http://support.microsoft.com/kb/283...=1&PA=1&SD=HSCH
This solved a nagging problem with MOM running WMI Scripts to start and
stop orchestrations. The MOM Server was starting the script on the BTS
Server, which then called API's to update state tables on the SQL
Server. This generated an error regarding the 'null' account attempting
to connect to the SQL Server.
Thanks,
Tom Canter
[ Post a follow-up to this message ]
|