Active Directory logins can't run schedule jobs successfully

Hi.
I have users who were recently migrated to Active
directory and ever since they haven't been able to submit
scheduled jobs successfully.
Here's the error message:
The job failed. Unable to determine if the owner (Active
Direcory group\login) of job "job name" has server access
(reason: Could not obtain information about Windows NT
group/user 'Active Direcory group\login'. [SQLSTATE 42000]
(Error 8198)).
I already added the new active directory groups to SQL
Server. I also tried giving these groups full access to
the db server and also tried to run the SQL Server Agent
service using a login in the active directory but they
still get the same error message.
A couple of workarounds here
PRB: 8198 Error Message Returned from Job Owned by Windows NT Authenticated
User
http://support.microsoft.com/default...b;en-us;241643
Also I seem to recall a fix but couldn't find it straight away, I'll have
another look
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"J Garcia" <anonymous@.discussions.microsoft.com> wrote in message
news:109001c43756$0c396660$3a01280a@.phx.gbl...
> Hi.
> I have users who were recently migrated to Active
> directory and ever since they haven't been able to submit
> scheduled jobs successfully.
> Here's the error message:
> The job failed. Unable to determine if the owner (Active
> Direcory group\login) of job "job name" has server access
> (reason: Could not obtain information about Windows NT
> group/user 'Active Direcory group\login'. [SQLSTATE 42000]
> (Error 8198)).
> I already added the new active directory groups to SQL
> Server. I also tried giving these groups full access to
> the db server and also tried to run the SQL Server Agent
> service using a login in the active directory but they
> still get the same error message.
>
|||Have a look at the results of the link below, in there is a fix but I'm not
sure its relavent exactly to this issue plus it would appear to be older
than SP3a so assuming you have applied that, it may not be relavent. There
is a good article on troubleshooting the error though
http://tinyurl.com/256p7
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Jasper Smith" <jasper_smith9@.hotmail.com> wrote in message
news:%23RNV0R6NEHA.2480@.tk2msftngp13.phx.gbl...
> A couple of workarounds here
> PRB: 8198 Error Message Returned from Job Owned by Windows NT
Authenticated
> User
> http://support.microsoft.com/default...b;en-us;241643
> Also I seem to recall a fix but couldn't find it straight away, I'll have
> another look
> --
> HTH
> Jasper Smith (SQL Server MVP)
> I support PASS - the definitive, global
> community for SQL Server professionals -
> http://www.sqlpass.org
>
> "J Garcia" <anonymous@.discussions.microsoft.com> wrote in message
> news:109001c43756$0c396660$3a01280a@.phx.gbl...
>
|||Thanks Jasper.
I did read those articles.
Our issues w/ the 2 workarounds:
Application users submit those SQL Agent jobs thru the
application. They'd rather not use a single sql
authenticated login since they will lose their audit
trail. Plus our std authentiaction process is to use
windows security.
Our OS guys are not willing to add 'Everyone' to the Pre-
Windows 2000 Compatible Access Group due to security risks.
They did add the users' groups in the active directory but
that didn't resolve the problem.
I will add that I removed builtin\administrators from SQL
Server and am using the 'sa' account for the SQL Server
Agent connection configuration.

>--Original Message--
>Have a look at the results of the link below, in there is
a fix but I'm not
>sure its relavent exactly to this issue plus it would
appear to be older
>than SP3a so assuming you have applied that, it may not
be relavent. There
>is a good article on troubleshooting the error though
>http://tinyurl.com/256p7
>--
>HTH
>Jasper Smith (SQL Server MVP)
>I support PASS - the definitive, global
>community for SQL Server professionals -
>http://www.sqlpass.org
>
>"Jasper Smith" <jasper_smith9@.hotmail.com> wrote in
message[vbcol=seagreen]
>news:%23RNV0R6NEHA.2480@.tk2msftngp13.phx.gbl...
Windows NT[vbcol=seagreen]
>Authenticated
us;241643[vbcol=seagreen]
straight away, I'll have[vbcol=seagreen]
in message[vbcol=seagreen]
submit[vbcol=seagreen]
(Active[vbcol=seagreen]
access[vbcol=seagreen]
42000][vbcol=seagreen]
to[vbcol=seagreen]
Agent
>
>.
>