Microsoft Office SharePoint Server 2007 SQL user account failure audits in the Application log
If you’re like me, you cant stand any repetitive errors in your event log.
The other day I was reviewing the application log on my MOSS 2007 server and found the following events:
Great…Like clockwork, every minute, another error. This is a screen shot of my Application Log, shouldn’t this nonsense be in the Security Log?!?….
Well, before i start to panic, I look at my change com and see that a couple days ago some work was done on the Shared Service Provider (SSP). You know, that suite of services that handles all the cool stuff in MOSS.
- Profiles and Audiences
- My Sites
- Search
- All of Excel Services
- All of the BDC (Business Data Catalog)
The interesting thing…All of those “cool” services were just fine.
So, I do some exploring, specifically inside SQL management Studio
(Considering that’s the source of the problem, not to mention Global Warming, Locust outbreak in Canton Illinois, etc).
What’s this? Under My SQL Jobs, there is a list of 4 DB_Job_DeleteExpiredSessions (of which, none are actually my current SSP)
HMMM>>>>So, I right click and disable all of them…
After a couple hours I come back and no new logs. COOL!
to finish, I delete the previous jobs and clear my event logs:
Considering myself lucky, I decided to reverse engineer a “Google” fix. Of course, I found the answer on Eventid.net, specifically this entry:
http://eventid.net/display.asp?eventid=18456&eventno=8175&source=MSSQLSERVER&phase=1
Mark Kelsay
In my case, this SQL server was hosting several MOSS 2007 databases. I found that the SQL agent was trying to login to a database that did not exist. MOSS uses SQL Server Jobs to delete expired sessions on a set schedule, every minute, to free up resources that are not being used. You will need to go into SQL Server management studio and disable the job called SharedServices_DB_job_deleteExpiredSessions. Once this is done you should no longer see those error messages in the event log. If you disable the right job, and the error message no longer appears, you can then delete the job. Always disable first. You do not want to delete until you are sure you got the right job.
Maybe you will find it useful,
Until then,
JP















