如何强制 SQL Server 识别新的域计算机帐户?
我正在设置一个新的网络服务器。根据我们网站的配置方式,IIS 应用程序池在其主机上作为 NetworkService
运行,然后每个 Web 服务器的域计算机帐户都被添加到 MYDOMAIN\Webservers 安全组,该安全组又被授予SQL Server登录访问各种数据库。新的 Web 服务器已添加到 MYDOMAIN\Webservers 组中,但 30 分钟后,我仍然收到
用户“MYDOMAIN\SERVER03$”登录失败
我相信在过去,我们只是在一夜之间忽略了它,它在早上神奇地工作了......但我有点想知道我可以做什么来强制新帐户和组成员身份在域中传播,以便 SQL Server 登录系统能够识别新的计算机帐户。有什么想法吗?
I'm setting up a new web server. The way our website's configured, the IIS application pools run as NetworkService
on their host machines, and then each of the web server's domain computer accounts is added to the MYDOMAIN\Webservers security group, which is in turn granted SQL Server login access to various databases. The new web server's been added to the MYDOMAIN\Webservers group, but 30 minutes later, I'm still getting
Login failed for user 'MYDOMAIN\SERVER03$'
I believe in the past, we just ignored it overnight and it was magically working in the morning... but I'd kinda like to know what I can do to force the new account and group membership to propagate across the domain so the SQL Server login system will recognise the new machine account. Any ideas?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
您可能需要强制复制域控制器;
正如您所注意到的,通过保留它并让复制正常进行,它会在给定时间内起作用。
更新。发布的链接适用于我使用的 Windows Server 2008/R2,但我相信其他版本也是如此。
You would probably need to force replication of the Domain Controllers;
It would work given time, as you noticed, by leaving it and letting the replication happen normally.
Update. The posted link is for Windows Server 2008/R2 which I use, but I believe it is the same for other versions.