Cannot generate SSPI context

dominique · 08-20-2008, 08:56 PM

Hello,

I have
Workstation:
Microsoft Windows 2000 5.00.2195 Service Pack 4

Server:
Microsoft Windows Server 2003 R2 Enterprise Edition Service Pack2
Microsoft SQL Server Management Studio 9.00.3042.00
Microsoft Analysis Services Client Tools 2005.090.3042.00
Microsoft Data Access Components (MDAC) 2000.086.3959.00 (srv03_sp2_rtm.070216-1710)
Microsoft MSXML 2.6 3.0 4.0 6.0
Microsoft Internet Explorer 7.0.5730.13
Microsoft .NET Framework 2.0.50727.1433
Operating System 5.2.3790

================================================== =============

When trying an ODBC connection to use with the additional deployment console I have an error:
Cannot generate SSPI context.

On the server event log I have:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 8/20/2008
Time: 4:39:41 PM
User: NT AUTHORITY\SYSTEM
Computer: ALTIRISDS
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I am using the same account for the 7 servers I have and 6 are working fine...
I have already tried several KBs from Microsoft but none works...

Any ideas?

thanks

dominique · 08-21-2008, 08:53 PM

The last changes made are:

replacing the AD\Service Account which was running all SQL Services to "Local System" and now the ODBC connection works, I wonder why other servers are working with AD|Service Account and this one needs Local System.?

Any specifics for NS or DS which require torun SQL Services with the service account (application identity) and not "Local System"?

Thanks