question

SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 asked SalamELIAS-8667 published

Strange Login and AppDomain xx created

On a sql 2k16, when I go through error logs, I find a lot of messages las follows

Server Date Process Count Text
SQL2K12 2021-03-15 13:30:44.640 spid17s 1 AppDomain 39 (MDS.mds_schema_user[runtime].38) unloaded.
SQL2K12 2021-03-15 13:00:15.550 spid62 1 AppDomain 40 (master.sys[runtime].39) created.
SQL2K12 2021-03-15 13:00:15.550 spid62 1 AppDomain 40 (master.sys[runtime].39) created.
SQL2K12 2021-03-15 10:00:43.090 spid45s 1 AppDomain 39 (MDS.mds_schema_user[runtime].38) created.


Not sure what this appDomain creating and unloading?
Thanks

sql-server-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ErlandSommarskog avatar image
0 Votes"
ErlandSommarskog answered

Hi, you are correct, I was able to find the record in jobsteps. However, it is strange, why it is using a login "sql2k12$" which is the name of mt sql server and as you can notice in the snapshot it runs under my user and not "sql2k12$" ,


SQL Server Agent always connects to SQL Server under its service account. This may come up as a machine account for reasons that I explained above.

If the owner of the job is a non-sysadmin login, SQL Agent will impersonate that login, but only in this case. I assume that you are sysadmin, and therefore SQL Agent will not impersonate you.

plus the job is disabled!!

It appears to be a BizTalk job. I know nothing about BizTalk, but maybe BizTalk starts the job on its own initiative.

The original question was about MDS. As far as I know, there is no connection between Master Data Services and BizTalk.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 answered

I agree Erland but this came to my attention as I was monitoring the error log so I continued in this thread as not to lose the history. Anyway, again, as you will notice in the snapshot, sql agent runs under my user (sysadmin), job runs under my user....but still getting the following error every 5 minutes in error log

83076-sqlagentlog.jpg


83077-sqlagent.jpg



sqlagentlog.jpg (21.1 KiB)
sqlagent.jpg (41.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ErlandSommarskog avatar image
0 Votes"
ErlandSommarskog answered

Anyway, again, as you will notice in the snapshot, sql agent runs under my user (sysadmin),

Where would I notice that? I can't see that you have posted any screenshot from SQL Server Configuration Manager, which is the place where you review and change the service account. (Find the service, right-click select Properties.)

Yes, there is your username in the left side in one of the images. But that is only your connection in SSMS. It is has nothing to do with the service account for Agent.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 answered ErlandSommarskog commented

Correct, here is the right snapshot, it is "NT Service\SQLSERVERAGENT" account and this is there since the setup of SQL 4 or 5 years ago, never touched it

83536-sqlagentlogconf.jpg



sqlagentlogconf.jpg (37.1 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

So that is where the SQLK12$ user is coming from.

Reminds to find out why BizTalk starts this job every five minutes.

0 Votes 0 ·
SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 answered ErlandSommarskog commented

Agree, but as I said earlier in a snapshot, job is disabled. In this case, why it is not able to find the login and always saying

"Reason: Could not find a login matching the name provided"
what does this mean?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

It means what it says.

In your initial post you talk about an SQL 2016 instance, so I take it that this job is defined on an SQL 2012 instance, but for some reason knocks on the door to the SQL 2016.

Sorry, I don't know your environment. I only as much as you tell me, and it is not always easy to piece the things together.

Have you checked BizTalk yet?

0 Votes 0 ·
SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 answered ErlandSommarskog commented

Sorry for this, the server when was setup initially with SQL2K12, I named the server SQL2K12 but it has been migrated around 2017 to to 2K16 but I kept the name sql2k12, didn't change it

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

By the way, have you check Task Scheduler? There could be something hiding there.

0 Votes 0 ·
SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 answered ErlandSommarskog commented

Except 1 task I have done recently reading error logs and populate a table in 1 database, I am not aware of any other task.
However, while I was searching before responding, I found a 2 very strange tasks in a directory called XBLGameSave.

How those were schedueled and installed Xbox related stuff !!!!! This a server not win 10, any idea?

84059-xblgamesave.jpg



xblgamesave.jpg (43.2 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I have no idea of what that Xbox thing could be. I don't think it's related to SQL Server. :-)

Going back to that Agent job, did you check the job history?

0 Votes 0 ·
SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 answered ErlandSommarskog commented

Yes, it runs successfully and this is what is killing me, it succeeds but login error is generated in error log.

84191-bts-cleanhistory.jpg



bts-cleanhistory.jpg (203.6 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I've seen this with the job syspolicy_purge_history job as well. It's notorious for knocking on the wrong door when you have multiple instaces, leaving login failures in the errorlog. But the job still reports success. And it is configure to report failure or errors (like most other jobs steps are).

But obviously the code of the job could have an error handler that traps the error and thinks "who cares?" and just drops it on the floor.

0 Votes 0 ·
SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 answered ErlandSommarskog commented

Yes, I have a the defauylt instance and a 2nd one on this server

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

And the error message appears on which of the two instances?

0 Votes 0 ·
SalamElias-0832 avatar image
0 Votes"
SalamElias-0832 answered ErlandSommarskog commented

Onn the default where the job runs

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

So did you check the jobs on the other instance?

0 Votes 0 ·