19

I have been "securing" our database server. To do this I removed some permissions from the folders that the SQL Express install created.

D:\SQL
D:\SQL\Data
D:\SQL\Backup
etc..

I kept the permissions on the Data folder as they were, but I removed anything I thought I didn't need from the others.

Now I can't backup databases. If I try selecting the backup location the dialog doesn't show anything in the d:\SQL folder and if I put the path in myself it tells me this:-

Cannot access the specified path or file on the server. Verify that you have the necessary security privilages and that the path and file exists.

...

It looks like folder permission problem. Another server configured in a similar way has a bunch of "allow" permissions for an account called "MSSQL$SQLEXPRESS", (which I know I deleted), But I can't re-add these permissions because there is no such group, user or built-in security principle on the server.

How do I add permissions for this MSSQL$SQLEXPRESS account?

  • 2
    Have you tried "repairing" the installation by running setup again? – Max Vernon Sep 7 '12 at 1:49
27

This account is a service SID.

The full name is NT SERVICE\MSSQL$SQLEXPRESS.

  • So I typed that account name in and it accepted it. Easy. – Mat Fergusson Sep 25 '12 at 3:54
  • Has Microsoft documented this anywhere? I am curious if you have a reference link. – pseudocoder Dec 11 '12 at 16:59
  • 1
  • 1
    It seems that the Microsoft Training Kit book (for Exam 70-462) titled "Administering Microsoft SQL Server 2012 Databases" covers these Virtual Accounts or Managed Local Accounts, in chapter 1. – Mat Fergusson Aug 9 '13 at 10:33
3

If your server is in a domain, you must select the computer name location or NT SERVICE\MSSQL$SQLEXPRESS will not be found when adding the user to security rights

  • ronald , then then how can i add "nt service\mssqlserver" into my folder's sharing? – SaMolPP Jan 22 '17 at 0:47
  • @SaMoIPP This is what Roland meant: When you add the "NT SERVICE\MSSQL$SQLEXPRESS" in the Field under "Enter the Object names to select", there is a "From this location" field, where you can click on "Locations" button and select your Computer name. Like he mentioned, this is relevant when the server is a domain. – Sathya Narayanan Jan 9 at 9:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.