We've been running VMM 2008 without any issues for weeks. Starting a few days ago, we started to get the following error when trying to launch the administrator console:
The SQL Server service account does not have permission to access Active Directory Domain Services (AD DS).
Ensure that the SQL Server service is running under a domain account or a computer account that has permission to access AD DS.For more information, see "Some applications and APIs require access to authorization information on account objects" in the Microsoft Knowledge Base at http://go.microsoft.com/fwlink/?LinkId=121054.
ID: 2607
We have the VMM service running under a domain account. After doing some digging, it turns out that at about the same time this stopped working, another completely unrelated user account was added in the domain. Ever since then, we receive the error above, and the follow error is getting logged in Event Viewer --> Custom Views --> Administrative Events:
Log Name: Windows PowerShell
Source: PowerShell
Date: 12/4/2008 6:01:35 PM
Event ID: 103
Task Category: Engine Health
Level: Warning
Keywords: Classic
User: N/A
Computer: vmm.virtual
Description:
Settings: Error loading the extended type data file:
Microsoft.SystemCenter.VirtualMachineManager, C:\Program Files\Microsoft System Center Virtual Machine Manager 2008\bin\virtualmachinemanager.types.ps1xml : File skipped because of validation exception: "AuthorizationManager check failed.".
Details:
ExceptionClass=RuntimeException
ErrorCategory=NotSpecified
ErrorId=ErrorsUpdatingTypes
ErrorMessage=Error loading the extended type data file:
Microsoft.SystemCenter.VirtualMachineManager, C:\Program Files\Microsoft System Center Virtual Machine Manager 2008\bin\virtualmachinemanager.types.ps1xml : File skipped because of validation exception: "AuthorizationManager check failed.".
Severity=Warning
SequenceNumber=231
HostName=Default MSH Host
HostVersion=1.0.0.0
HostId=cbebdc16-fd95-4aa6-97e7-6d2f3983558d
EngineVersion=
RunspaceId=
PipelineId=
CommandName=
CommandType=
ScriptName=
CommandPath=
CommandLine=
AdditionalInfo:
Name=;Value=
Name=;Value=
Name=;Value=
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="PowerShell" />
<EventID Qualifiers="0">103</EventID>
<Level>3</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-12-05T00:01:35.000Z" />
<EventRecordID>17057</EventRecordID>
<Channel>Windows PowerShell</Channel>
<Computer>vmm.virtual</Computer>
<Security />
</System>
<EventData>
<Data>Error loading the extended type data file:
Microsoft.SystemCenter.VirtualMachineManager, C:\Program Files\Microsoft System Center Virtual Machine Manager 2008\bin\virtualmachinemanager.types.ps1xml : File skipped because of validation exception: "AuthorizationManager check failed.".
</Data>
<Data> ExceptionClass=RuntimeException
ErrorCategory=NotSpecified
ErrorId=ErrorsUpdatingTypes
ErrorMessage=Error loading the extended type data file:
Microsoft.SystemCenter.VirtualMachineManager, C:\Program Files\Microsoft System Center Virtual Machine Manager 2008\bin\virtualmachinemanager.types.ps1xml : File skipped because of validation exception: "AuthorizationManager check failed.".
Severity=Warning
SequenceNumber=231
HostName=Default MSH Host
HostVersion=1.0.0.0
HostId=cbebdc16-fd95-4aa6-97e7-6d2f3983558d
EngineVersion=
RunspaceId=
PipelineId=
CommandName=
CommandType=
ScriptName=
CommandPath=
CommandLine=
AdditionalInfo:
Name=;Value=
Name=;Value=
Name=;Value=</Data>
</EventData>
</Event>
Every time you attempt to launch the administrator console, groups of the errors above get logged.
So, it appears that at the same time this new user account was added to the domain, something else changed on the domain controller at the same time? Any ideas?
A