SQL Server 2008 Install – Access Denied

Install being attempted on Windows Server 2008 R2 SP1.

The user installing the RDBMS is an admin so should have all permissions.

2012-03-22 14:29:25 SQLEngine: --SqlServerServiceSCM: Waiting for nt event 'Global\sqlserverRecComplete$DBMON' to be created
2012-03-22 14:29:30 SQLEngine: --SqlServerServiceSCM: Waiting for nt event 'Global\sqlserverRecComplete$DBMON' or sql process handle to be signaled
2012-03-22 14:29:30 Slp: Configuration action failed for feature SQL_Engine_Core_Inst during timing ConfigRC and scenario ConfigRC.
2012-03-22 14:29:30 Slp: Access is denied
2012-03-22 14:29:31 Slp: Sco: Attempting to write hklm registry key SOFTWARE\Microsoft\Microsoft SQL Server to file C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Log\20120322_142338\Registry_SOFTWARE_Microsoft_Microsoft SQL Server.reg_
2012-03-22 14:29:31 Slp: Sco: Attempting to write hklm registry key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall to file C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Log\20120322_142338\Registry_SOFTWARE_Microsoft_Windows_CurrentVersion_Uninstall.reg_
2012-03-22 14:29:31 Slp: Sco: Attempting to write hklm registry key SOFTWARE\Microsoft\MSSQLServer to file C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Log\20120322_142338\Registry_SOFTWARE_Microsoft_MSSQLServer.reg_
2012-03-22 14:29:31 Slp: Sco: Attempting to write hklm registry key SOFTWARE\Wow6432Node\Microsoft\Microsoft SQL Server to file C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Log\20120322_142338\Registry_SOFTWARE_Wow6432Node_Microsoft_Microsoft SQL Server.reg_
2012-03-22 14:29:31 Slp: Sco: Attempting to write hklm registry key SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall to file C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Log\20120322_142338\Registry_SOFTWARE_Wow6432Node_Microsoft_Windows_CurrentVersion_Uninstall.reg_
2012-03-22 14:29:31 Slp: Sco: Attempting to write hklm registry key SOFTWARE\Wow6432Node\Microsoft\MSSQLServer to file C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Log\20120322_142338\Registry_SOFTWARE_Wow6432Node_Microsoft_MSSQLServer.reg_
2012-03-22 14:29:32 Slp: Access is denied

The above errors are taken from the setup bootstrap. What you end up with is half an installation. The RDBMS does get installed but it starts up in Single User, Some permissions are missing, the sa password is blank. The Service accounts don’t get the permissions they need. The Agent wont start for this reason.

Attempt 1 – Remove UAC restrictions on User installing SQL Server. Reboot and Retry. No luck.

Attempt 2 – Add service accounts into Admin group. Not sure why i tried this apart from desperation to get it working. the service accounts normally would earn their permissions during the install as they would get added into the appropriate SQL Server permisson groups. Reboot Server and retry. No Luck

Solution – This failure often is caused by a system or domain policy removing the SeDebugPrivelege security privilege from the administrator account running setup. Verify that the account running has this privilege.

Open Group Policy…

Start | Run | gpedit.msc | OK |

Navigate to: Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment | Debug programs

The account through which we are trying to run the setup should be here ( besides the local admin on that machine). I included that here, restarted the server ( this is mandatory, gpupdate /force will not work) and ran the setup and it was successful this time.

NOTE: Rebooting the Server is critical in applying the permission

SQL Server 2008 setup needs this privilege to start up the SQL Server process and listen to an event that signals back to setup that SQL Server successfully started.

Debug Programs User Rights – Debug Programs is used to send signals back and forth between the OS and the SQL installation.

More info on error here http://connect.microsoft.com/SQLServer/feedback/details/390424/sql-server-2008-setup-fails-if-debug-programs-rights-are-missing

Checking Group Policy –

The AccessChk tool (http://technet.microsoft.com/en-us/sysinternals/bb664922) will print all privleges for an account by running:

accesschk.exe -a <Domain>\<Account> *

Advertisements

One Response to SQL Server 2008 Install – Access Denied

  1. Steve Mushkat says:

    Still helpful after all these years! Had the same issue & sure enough was missing one of the permissions needed. Thanks.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: