SQL Server reporting Failure Audit in Application Log
While I was out doing an installation at a customer I noticed I started having problems with the SQL server’s Windows Application Log. Below you will find the error and the solution on how to resolve this. This took me 3 days and a call to Microsoft to resolve this problem since I couldn’t really find any information online discussing on how to resolve this issue. I feel it’s not a common problem, but no less another problem I had to work through.
ERROR from the Windows Application log on the SQL server:
Event Type: Failure Audit
Event Source: MSSQLSERVER
Event Category: (4)
Event ID: 18456
Date: 1/21/2009
Time: 5:11:36 PM
User: FS\FS-SCCM$
Computer: FS-SQL1
Description:
Login failed for user ‘FS\FS-SCCM$’. [CLIENT: 10.1.255.163]
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 18 48 00 00 0e 00 00 00 .H……
0008: 08 00 00 00 46 00 53 00 ….F.S.
0010: 2d 00 53 00 51 00 4c 00 begin_of_the_skype_highlighting
00 53 00 51 00 4c 00 FREE end_of_the_skype_highlighting -.S.Q.L.
0018: 31 00 00 00 07 00 00 00 1…….
0020: 6d 00 61 00 73 00 74 00 m.a.s.t.
0028: 65 00 72 00 00 00 e.r…
Conduct a System Center Configuration Manager Site Repair by doing the following:
- Click on Start
- Click on Microsoft System Center
- Click on Configuration Manager 2007
- Click on ConfigMgr Setup
-
The Wizard will pop up
- Click Next
- Click Perform site maintenance or reset this Site
- Click Next
-
Check all 3 options
- Re-Apply default file and registry permissions on this site server
- Modify SQL Server Configuration
- Modify SMS Provider configuration
- Re-Apply default file and registry permissions on this site server
- Click Next
- Confirm the information and Click Next
- Confirm the information and Click Next
- A popup will appear asking if you would like to reinstall the provider and click YES
- Click Next
- This will then automatically go into the actions. When completed, close and restart the server.
