SQL 2005 Agent job step calling ActiveX subsystem fails

i’m having problems configuring sql 2005 agent job step, new credential , proxy setup stuff.  i followed set per bol , “what’s new in sql agent” (i think) it’s not working.

 

the job can called correctly , start , execute activex job step fails with:

 

“error creating security descriptor shared objects (reason: no mapping between account names , security ids done).”

 

i tried adding user permissions agent account per q283811 (replace process level token, etc.)  but still didn’t work.

 

it work if set sql agent service run under local admin account (psystem referenced below) instead of local system though seems permissions issue.

 

since "what's new" technet article says “if upgrade sql server 2005, existing proxy account created , subsystems assigned single proxy account. enables sql server agent jobs continue function did in sql server 2000 after upgrade.”, even built whole new system at sql 2000 , verified that the agent job step functions fine, upgraded sql 2005 , still fails same error.

 

here’s generated script of setup steps i’m doing:

 

create credential [psystem] identity = n'dolphin\psystem', secret = n'...'

go

msdb..sp_add_proxy @proxy_name = 'pproxy', @credential_name = 'psystem'

go

create user [dolphin\pusers] login [dolphin\pusers]

go

exec msdb..sp_addrolemember n'sqlagentuserrole', n'dolphin\pusers'

go

msdb..sp_grant_login_to_proxy @login_name = 'dolphin\pusers', @proxy_name = 'pproxy'

go

msdb..sp_grant_proxy_to_subsystem @proxy_name = 'pproxy', @subsystem_name = 'activescripting'

go

msdb..sp_grant_proxy_to_subsystem @proxy_name = 'pproxy', @subsystem_name = 'cmdexec'

go

 

the psystem account local windows admin need job step run under network permissions, pusers group general windows users group access control of job.  database access , transact-sql job steps run fine setup, it's activex , cmdexec ones fail.

 

i can’t find info on error message , can’t figure out setup step i’m missing or i’m doing wrong.

 

thanks!

 

i'm having same issue, have found no solution far.

it's clean install of sql 2005 on win 2008. have credential , proxy setup using administrator account on machine. machine not in domain.

step 1 of job creates extract file, step 2 activex script zip , email file. step 2 fails message "error creating security descriptor shared objects (reason: 1332). step failed."

some searching identified error 1332 means "no mapping between account names , security ids done".

i followed thae articles on msdn setting credential , proxy. 1 issue have adding administrator principal proxy. can add it, , save it, when @ properties proxy, principal not there. may realted fact/statement saw on msdn stated adminnistrators automatically added principals.

any/all appreciated.

thanks.

SQL Server  >  SQL Server Tools