Quantcast
Channel: Virtual Machine Manager – General forum
Viewing all articles
Browse latest Browse all 2770

Changed SCVMM Service Accounts - Can't log in

$
0
0

I uninstalled (retained settings) SCVMM and re-installed SCVMM under a different domain level service account. 

Everything is working and SCVMM is up and running again. The only issue I am experiencing is that I can't log into SCVMM via the credentials of the newly assigned service account. I can log into SCVMM with any other account granted access to SCVMM, EXCEPT the service account. I logged in via another SCVMM Administrator account and assigned the new service account to the Administrator role in SCVMM and still no luck. 

When trying to log into SCVMM via the service account, I am getting an Error ID: 1615 "VMM is unable to perform this operation without a connection to a Virtual Machine Manager management server."

I am tracing this down to a SQL issue, as I used SQL Profiler to trace the SQL commands that are executed upon log in. I am seeing this command executed:

exec dbo.prc_RBS_UserRole_GetAllByUser @ExecuteAsUserName=sid of account trying to login,@AccountType=0

 

This is the returned output of the above command:

 

Msg 15517, Level 16, State 1, Procedure prc_RBS_UserRole_GetAllByUser, Line 13

Cannot execute as the database principal because the principal "domain\service account" does not exist, this type of principal cannot be impersonated, or you do not have permission.

Well I know the account exists, because it was able to resolve the SID into the correct username....so not sure what the rest means (not terribly familiar with the in's and out's of SQL). 

Within the VMM database properties, I see that SA is the Owner and that an User account called "VMMSetup" was created and associated to the login account of the domain service account and granted db_owner permissions. 

I executed this command: grant impersonate on user::VMMSetup to [domain\service account]

The command executed successfully, but still can't login via the service account.

Any ideas?


Viewing all articles
Browse latest Browse all 2770

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>