Database Service account


Hi guys,.

Database Version: 11g

Platform - Windows server 2008

Just one question, if I want to run my db (defined in services.msc) services as a domain account, done it requires local administrator rights?...

Thank you

Try to start the Windows Service for the Oracle instance with the same credentials of the user that the database has been installed. In general, user Oracle is part of the DBA group at the level of the Windows operating system and is also given Admin rights. Without the appropriate rights, you will not be able to start the instance and could also get errors in the Alert.log

Also, make sure that you give the same credentials for the Windows Listener (tnslsnr) service too, otherwise you'll find yourself not able to connect connections remotely (like the tnslsnr did not have the rights for the Oracle executable) and no concrete in listener.log errors

Thank you

Harman

Tags: Database

Similar Questions

  • Monitoring stops working after changing the SQL Service account

    I have the Foglight for SQL Server cartridge. I recently changed the service account that is running the SQL Server engine and SQL Server Agent from a local account to a domain account. Everything works fine on the SQL Server side.

    No configuration changes have been made on the Foglight end, and none should be necessary Foglight is configured to use a separate service for SQL account both OS level followed. This account has always been in the local "Administrators" Group on the database server, as well as a "sysadmin" on the side of SQL Server server role. If I 'validate connectivity' within Foglight to that server, it shows that the connection is correct. I tried to remove the monitoring officer and recreation, but yet to see errors in the attached screenshot. Has anyone meet a similar problem?

    Although I couldn't find any indication that the agents were locked, I tried to release them anyway. That seemed to do the trick!

    This can be found here:

    Databases-> Dashboard Support-> Support of databases-> release agents

  • Earphone is not upward or the database service is not registered with her

    Hello

    I'm new to the world of the oracle. Newly installed oracle DB 11 g. I tried to start dbconsole his failure. So I looked in Google additional suggestions on the order of RECREATE EM REPOSITORY .emctl stop dbconsole went successfully.

    but when I tried to run emca - deconfig dbcontrol db error listener is not to launch or database service is not registered with it below is the log

    tail - n 20 /u01/app/oracle/cfgtoollogs/emca/ORCL/emca_2014_06_05_09_07_17.log

    at oracle.sysman.emcp.EMConfigAssistant.invokeEMCA(EMConfigAssistant.java:589)

    at oracle.sysman.emcp.EMConfigAssistant.performConfiguration(EMConfigAssistant.java:1448)

    at oracle.sysman.emcp.EMConfigAssistant.statusMain(EMConfigAssistant.java:573)

    at oracle.sysman.emcp.EMConfigAssistant.main(EMConfigAssistant.java:521)

    June 5, 2014 perform 09:07:37 oracle.sysman.emcp.EMConfig

    SEVERE: Earphone is not upward or database service is not registered with it. Start the listener and register the service of database and rerun the wizard of Configuration of EM.

    See the file journal at /u01/app/oracle/cfgtoollogs/emca/ORCL/emca_2014_06_05_09_07_17.log for more details.

    June 5, 2014 perform 09:07:37 oracle.sysman.emcp.EMConfig

    CONFIG: Stack Trace:

    oracle.sysman.emcp.exception.EMConfigException: listener has not elapsed or the database service is not registered with it. Start the listener and register the service of database and rerun the wizard of Configuration of EM.

    at oracle.sysman.emcp.ParamsManager.checkListenerStatusForDBControl(ParamsManager.java:3245)

    at oracle.sysman.emcp.EMReposConfig.invoke(EMReposConfig.java:203)

    at oracle.sysman.emcp.EMReposConfig.invoke(EMReposConfig.java:157)

    at oracle.sysman.emcp.EMConfig.perform(EMConfig.java:253)

    at oracle.sysman.emcp.EMConfigAssistant.invokeEMCA(EMConfigAssistant.java:589)

    at oracle.sysman.emcp.EMConfigAssistant.performConfiguration(EMConfigAssistant.java:1448)

    at oracle.sysman.emcp.EMConfigAssistant.statusMain(EMConfigAssistant.java:573)

    at oracle.sysman.emcp.EMConfigAssistant.main(EMConfigAssistant.java:521)

    Oracle.sysman.emcp.EMConfig 5 June 2014 RestoreOuiLoc 09:07:37

    CONFIG: Restoration of oracle.installer.oui_loc to /u01/app/oracle/product/11.2.0/db_1/oui

    [config oracle@gds-bgl-oradb] $ tail-f /u01/app/oracle/cfgtoollogs/emca/ORCL/emca_2014_06_05_09_07_17.log

    at oracle.sysman.emcp.ParamsManager.checkListenerStatusForDBControl(ParamsManager.java:3245)

    at oracle.sysman.emcp.EMReposConfig.invoke(EMReposConfig.java:203)

    at oracle.sysman.emcp.EMReposConfig.invoke(EMReposConfig.java:157)

    at oracle.sysman.emcp.EMConfig.perform(EMConfig.java:253)

    at oracle.sysman.emcp.EMConfigAssistant.invokeEMCA(EMConfigAssistant.java:589)

    at oracle.sysman.emcp.EMConfigAssistant.performConfiguration(EMConfigAssistant.java:1448)

    at oracle.sysman.emcp.EMConfigAssistant.statusMain(EMConfigAssistant.java:573)

    at oracle.sysman.emcp.EMConfigAssistant.main(EMConfigAssistant.java:521)

    Oracle.sysman.emcp.EMConfig 5 June 2014 RestoreOuiLoc 09:07:37

    CONFIG: Restoration of oracle.installer.oui_loc to /u01/app/oracle/product/11.2.0/db_1/oui

    IG] $


    [oracle@gds-bgl-oradb db_1] $ cat network/admin/listener.ora

    listener.ora # Network Configuration file: /u01/app/oracle/product/11.2.0/db_1/network/admin/listener.ora

    # Generated by Oracle configuration tools.

    LISTENER =

    (DESCRIPTION_LIST =

    (DESCRIPTION =

    (ADDRESS = (PROTOCOL = CIP)(KEY = EXTPROC1521))

    (ADDRESS = (PROTOCOL = TCP) (HOST = gds-bgl-oradb)(PORT = 1521))

    )

    )

    [oracle@gds-bgl-oradb db_1] $ cat network/admin/tnsnames.ora

    tnsnames.ora # Network Configuration file: /u01/app/oracle/product/11.2.0/db_1/network/admin/tnsnames.ora

    # Generated by Oracle configuration tools.

    LISTENER_ORCL =

    (ADDRESS = (PROTOCOL = TCP) (HOST = gds-bgl-oradb)(PORT = 1521))

    ORCL =

    (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP) (HOST = gds-bgl-oradb)(PORT = 1521))

    (CONNECT_DATA =

    (SERVER = DEDICATED)

    (SERVICE_NAME = orcl.cisco.com)

    )

    )

    ADR_BASE_LISTENER = / u01/app/oracle

    [oracle@gds-bgl-oradb db_1] $ lsnrctl status

    LSNRCTL for Linux: Version 11.2.0.1.0 - Production on June 5, 2014 09:30

    Copyright (c) 1991, 2009, Oracle.  All rights reserved.

    Connection to (DESCRIPTION = (ADDRESS = (PROTOCOL = IPC) (KEY = EXTPROC1521)))

    STATUS of the LISTENER

    ------------------------

    Alias LISTENER

    Version TNSLSNR for Linux: Version 11.2.0.1.0 - Production

    Start date June 5, 2014 08:55:04

    Uptime 0 days 0 hours 34 min 56 s

    Draw level off

    Security ON: OS Local Authentication

    SNMP OFF

    Parameter Listener of the /u01/app/oracle/product/11.2.0/db_1/network/admin/listener.ora file

    The listener log file /U01/app/Oracle/diag/tnslsnr/GDS-BGL-OraDB/listener/alert/log.XML

    Summary of endpoints listening...

    (DESCRIPTION = (ADDRESS = (PROTOCOL = ipc) (KEY = EXTPROC1521)))

    (DESCRIPTION = (ADDRESS = (PROTOCOL = tcp) (HOST = gds - bgl - oradb.cisco.com)(PORT=1521)))

    Summary of services...

    Service "ORCL" has 1 instance (s).

    Instance "ORCL", State LOAN, has 1 operation for this service...

    Service 'orclXDB' has 1 instance (s).

    Instance "ORCL", State LOAN, has 1 operation for this service...

    The command completed successfully

    Please help me.

    You create the password with passwd file utility with the key.

    for the normal user login try one account other than sys (HR, System...)

  • Do I need to allocate a CAL for a service account?

    Hi, a small question hopefully.

    I have a large number of R2 2012 Windows servers running a variety of applications in all of our field.  What I was asking is do I need a CAL for each service account?  I understand that the calluses are either user or device, but have seen conflicting information on this subject.

    It would be good to have a definite answer if possible?

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
    *
  • Failed to add the service account to the pdf generator

    Hi guys,.

    Pourrait any assistance on the question I receive.

    I am currently working on a production server and adding a service account to the pdf generator and I get the error message: "the user account is not valid for the computer.

    I can't connect to windows with this fine account.

    Is there a group policy or and rights must be changed to fix this problem?

    Please advise,

    Thank you

    Hi Venky143,

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the Windows Server Forum. Please post your question in the Windows Server Forum.

    http://social.technet.Microsoft.com/forums/en/category/WindowsServer/

    In addition, you can post your question in the ITpro forums.

    http://social.technet.Microsoft.com/forums/en/category/w7itpro, windowsvistaitpro, windowsxpitpro, windowsintune

    Thank you.

  • How to install a windows with different runas service account

    Hello
    I would like to ask, how can I change the account to connect to the course, I install the service. The default service account is localsystem. I would like to change in administrator or another account. The service needs to access the reader to share in the other server. If use the localsystem account, the service cannot access the network. someone has some idea for my case. I can't change it when it is installed, because I need to deploy the service of thousands of machines.

    Thank you
    Nicholas

    Hello

    1.) deploy the application on workstations
    2.) develop a batch script to automate the changing of credentials to services
    SC config obj = pass =

    You can use the administrator and the password admiistrator for the batch script.

    Don't forget to vote too useful for others and to accept the proposed response, if it is relevant build it KB in this Forum.

  • The Windows fax service cannot start because there is no such thing as a privilege in the fax service account.

    I'm trying to set up Windows Fax and Scan to store faxes "received" in a folder encrypted (EFS). (I use Windows Vista Business).

    The fax service will not start if it set to log on as a "local system account", but faxes are stored with the certificate of local system and inaccessible to other users.

    To work around this problem, I tried to configure the Fax Service to log on under a specific user account. However, after that and try to re - start the Service I get.

    Error: 1297 as a service privilege is needed to function properly does not exist in the service account configuration.

    One of the services that begins with the "local system account" does not automatically start with a normal user account and if you get the message.  Most of the services are designed to start with the local system account and not a special user account (actually, not on my system using a specific user account for services).  I think that part is OK and you must return it to the local system account (so eliminate the error message and remove that as a problem to solve).

    I think the question may also be a permissions problem in the user access to the fax.

    To view your permissions, right-click on the file/folder, click Properties, and check the Security tab.  Check the permissions you have by clicking on your user name (or group of users).  Here are the types of permissions, you may have: http://windows.microsoft.com/en-US/windows-vista/What-are-permissions.  You must be an administrator or owner to change the permissions (and sometimes, being an administrator or even an owner is not sufficient - there are ways to block access (even if a smart administrator knows these ways and can move them - but usually should not because they did not have access, usually for a very good reason).)  Here's how to change the permissions of folder under Vista: http://www.online-tech-tips.com/windows-vista/set-file-folder-permissions-vista/.  To add take and the issuance of right of permissions and ownership in the right click menu (which will make it faster to get once it is configured), see the following article: http://www.mydigitallife.info/2009/05/21/take-and-grant-full-control-permissions-and-ownership-in-windows-7-or-vista-right-click-menu/.

    To resolve this problem with folders, appropriating the files or the drive (as an administrator) and give you all the rights.  Right-click on the folder/drive, click Properties, click the Security tab and click on advanced and then click the owner tab.  Click on edit, and then click the name of the person you want to give to the property (you may need to add if it is not there--or maybe yourself). If you want that it applies to subfolders and files in this folder/drive, then check the box to replace the owner of subcontainers and objects, and click OK.  Back and now there is a new owner for files and folders/player who can change the required permissions.  You can change now switched to read-only (even if the main folder indicates that they are always read-only - you can access yourself as the owner).  You can keep them in read-only to other users, customers and administrators even (although they can support themselves and access, if they wish, and it is really not that you can do to stop it except protect the file with a password by using a 3rd party product.)  Here is more information on the ownership of a file or a folder: http://www.vistax64.com/tutorials/67717-take-ownership-file.html.  To add take ownership in the menu of the right click (which will make it faster to get once it is configured), see the following article: http://www.howtogeek.com/howto/windows-vista/add-take-ownership-to-explorer-right-click-menu-in-vista/.

    If that is indeed a problem of certificates (and it seems there is a but looks like he takes care of himself with the Wizard), then we must make the certificate available to all users of the system (from where it is now stored) - and I think I saw how to do this in secpol.msc.  Here is some information I found on EFS secpol.msc in the public key policies (you can get it by entering this in the area of research and the antering and then a double click on the program icon that appears) where you would put in place.

    --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

    The Encrypting File System (EFS) is an encryption technology of base file used to store the encrypted files on NTFS file system volumes. Encrypted files cannot be used unless the user has access to the keys needed to decrypt the information.

    Encryption is transparent to the user that encrypted the file. This means that you don't have to manually decrypt the encrypted file before that you can use. You can open and edit the file as you normally would. Once you encrypt a file or folder, you work with the encrypted file, or a folder like you do with any other file or folder.

    The use of EFS is similar to using permissions on files and folders. Both methods can be used to restrict access to the data. However, an attacker who gets physical access unauthorized to your encrypted files or folders will be prevented from reading. If the intruder tries to open or copy your encrypted file or folder, he or she receives an access denied message. Permissions on files and folders do not protect against unauthorized physical attacks.

    You encrypt or decrypt a folder or file by setting the property of encryption for files and folders, as you define another attribute such as read-only, compressed, or hidden. If you encrypt a folder, all files and subfolders created in the encrypted folder are automatically encrypted. It is recommended that you encrypt at the folder level.

    You can also encrypt or decrypt a file or folder using the Cipher command.

    When you work with encrypted files and folders, keep in mind the following information:

    • Only the files and folders on NTFS volumes can be encrypted. However, you can use Web distributed authoring and versioning (WebDAV), which also works with NTFS, to transfer files in encrypted form.
    • Files or compressed files can also be encrypted. If the user marks a file or folder for encryption, that file or folder will be uncompressed.
    • Encrypted files are decrypted if you copy or move the file to a volume that is not an NTFS volume.
    • Moving files unencrypted in an encrypted folder will automatically cause these files to be encrypted in the new folder. However, the reverse will not automatically decrypt files. The files must be explicitly decrypted.
    • Files marked with the system attribute cannot be encrypted, nor can files in the system root directory structure.
    • Encrypt a file or a folder does not protect against the removal or the list of files or directories. Anyone with the appropriate permissions can delete or list encrypted folders or files. For this reason, the use of EFS in combination with NTFS permissions is recommended.
    • You can encrypt or decrypt files and files located on a remote computer that has been enabled for remote encryption, but, in this version of Windows, the data that is transmitted over the network by this process is not encrypted. Other protocols, such as Secure Socket Layer/Transport Layer Security (SSL/TLS) or Internet Protocol security (IPsec) must be used to encrypt data while they are transmitted over the network. (You can also use WebDAV, as described in the first bullet, to pass the file in encrypted form.)

    EFS policy settings

    You can use Group Policy to configure a number of EFS settings.

    Allow or disallow the EFS

    You can choose to allow or prohibit the use of EFS altogether. If you do not configure the policy settings for EFS, it is OK.

    The EFS options

    If you choose to allow EFS, you can also select a number of options, such as whether to automatically encrypt the Documents folder of the user, to require a smart card for use with EFS, to cache keys created based on a smart card, to enable the encryption of the Windows page file, or to notify users to make the backup copies of their encryption keys.

    EFS certificate

    EFS encryption is based on the pairs of keys associated with certificates. In most managed environments, the certificates are issued by a certification authority (CA) running in the field. Users can automatically be issued a certificate from the CA without manual intervention. EFS settings include a drop-down models of certificates that are available in the field list so that you can specify which certificate template to use for autoenrollment.

    Note
     

    The list includes all the models of certificates, present in the field. An administrator must configure the CA so that certificates can be issued. Some displayed certificates are not available.

    In cases where a certificate cannot be issued by a certification authority, EFS can use a self-signed certificate created on the local computer (there is a section in secpol.msc to create a certificate). You can choose to disable this functionality and specify a default key length.

    -------------------------------------------------------------------------------------------------------------------------------------------------------------------

    I don't know if that helped or not.  Please let us know and be specific about what other questions, you may have because I don't know what you mean and which is still confusing (and to be honest, I am a little confused at this point - it is not an easy task to accomplish).

    I hope this helps.

    Good luck!

    Lorien - MCSA/MCSE/network + / A +.

  • Service account

    Guys,

    I have a problem with NTP and found the way to resolve the issue: http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids10/hwguide/hwts.htm#wp36468

    Step 1 is "Connect to the service account", but how?

    THX

    Stéphane

    CLI

    #conf t

    # identifier service private service password

    #exit

    You can now get out completely and re-login with the service user name and the password you selected.

  • sensor to recreate the image via the service account?

    Hello, I have the following problem with a JOINT-2 (4.1.5 S211) module:

    I am able to get to the screen to login via SSH. I connect with my login and my password but the following error: cannot communicate with authenticationApp (getUserAccountConfig). Please contact your system administrator.

    You want to run cidDump? [No]: _

    I can, however, enter into the sensor via the service account. I tried to stop and restart the CID as well as restart the sensor, unfortunately without success. At this point, the only thing I know to do is run partition recovery for reimage the sensor - is it possible to do it on the service account?

    -Patrick

    Hello

    You use the set of user name and password? What happened to the sensor through telnet and HTTPS access? Are you facing the same problem with above all?

    If the password is correct then the engine of Authantication could have been corrupted.

    You can rebuild image of the sensor through the service account.

    Start the JOINT-2 to the maintenance partition:

    cat6k # hw - module module reset cf:1 module_number

    Session in the partition maintenance CLI:

    processor cat6k # session slot slot_number 1

    Connect to the partition maintenance CLI:

    Login: guest

    Password: cisco

    If it is possible, then you can recreate the application partition image:

    http://www.Cisco.com/univercd/CC/TD/doc/product/iaabu/csids/csids10/hwguide/hwclipr.htm#wp91045

    After you re-create the image restart us the JOINT-2 for the application partition:

    cat6k # hw - module module reset hdd:1 module_number

    Check that the JOINT-2 is online and that the version of the software is correct and that the status is ok:

    cat6k # see the module_number module

    Connect to the JOINT-2 application partition:

    processor cat6k # session slot slot_number 1

    You have to retrieve your backup configuration.

    Note the post if it helps.

    Ashish

  • The unit 3.1 (3) change of password for the Service account

    Hi all

    I am aware of the link and procedure on how to change the password of the service account of the unit 3.1 X here: http://www.cisco.com/en/US/customer/products/sw/voicesw/ps2237/products_tech_note09186a0080093f54.shtml#topic2

    My question is this. I have 5 unity servers that use this service account in any area, which includes Europe and the United States. If I change the password in AD all services will continue to work with the old password as long as they have not restarted with the old password? I know I need to change the password for each service that uses the account and then restart the unit, but since AD taking so long to reply, I was hoping to change the password of the account one day and then the next day or even longer when I have planned for my failure, I can then change the password for the services on each server and then restart the unit and make sure that replication is complete and the services start again with the new password.

    I think as long as I do not have to restart services can I change the password of the service account in AD a day or two before I schedule my outage can I change the password for all services, and then restart the unit. I know that I can force replication, but it would be nice to be able to change it in advance as long as it is not flexible, whatever it is. Even force the replication takes a lot of time in our environment and I want to be sure, can I change well in advance without having a negative impact.

    Thanks for your time!

    Keith

    If you change a password for a domain account, it should respond immediately through the Organization as AD treats this with the highest coastal.

  • "Unity_SERVERNAME" running under a service account

    We use the 4.0 unit (3) and the MAPI profile use of the unit to connect to Exchange became corrupted if we changed all the services account run by the Unity_SERVERNAME, is it ok to use this account or change the service account later, ideas?

    Concerning

    Create a new account. Run against her Assistant permission for message store services. Open the services applet and change the account for the services that have been using the corrupted account.

    Also see the instructions for "check the accounts that Cisco Unity Services newspapers as" http://www.cisco.com/en/US/products/sw/voicesw/ps2237/products_tech_note09186a00800949dc.shtml#topic2-1

    To answer your question, unite_ has the right permissions as the account that sends a message on unidentified callers, but it must be done the right way. That's what the installation documentation for.

  • How to change the password for the service account for a specific application?

    PC is used by some employees at the workplace.

    A user has installed an application on this PC, all users can use this application with user password this person who has installed.

    After that the user who has installed an application has changed the password, the Application is locked.

    I heard that need to change the password of the service account for a specific application.

    How to do?

    Advice me please.

    Thank you

    It depends on the application itself. You could check the FAQ of the application or to re - install the application and ensure that it is available for all users of this machine.

  • Reset the 4255 with service account admin password?

    I have a 4255 with no Admin password work. However, I have a work service account password. Is there a way to connect on the orders of account and service number to unlock or reset the admin password?

    Hello

    You can use the service account to create a new password if the administrator password is lost.

    To reset the password through the root account, you can run the commands from the root below:

    To connect to the service account

    -bash - 2.05 b$ -.

    Password:

    -bash - 2.05 # passwd b! -Enter username Admin -!

    Change password for

    Enter the new password (minimum 5, maximum of 8 characters)

    Please use a combination of upper and lower case and numbers.

    Enter the new password:

    Re-type the password:

    Changed password.

    Hope that answers your query.

    Don't make any other changes to the sensor through the service except under the direction of TAC account.

    -Danny Shankar

  • Cisco ACS 5.2: How "service account" exempt from the life of password policy

    We have a GBA policy to disable the user account (user internal store name) after X days if the password is not changed.

    However, it creates challenges 'service accounts' servers NM. My goal is to exclude these password change service accounts. in other words, their passwords must not be updated.

    How to configure ACS to do this?

    THX

    Eric

    Hello

    I don't think it's an option.

    Dan

  • Smartphones blackBerry how to change the connection mode for a BlackBerry Internet Service account on my 9700

    Got my first BB is the 9700 and I believe that my company doesn't have not BES, I must connect on my BIS via a computer to set up my work email (Microsoft Exchange Server). After having read about it and try, I get an error message on the Web site of my provider which basically means that I need to change the connection mode for a BlackBerry Internet Service account. I checked the site Web of Blackberry and the instructions do not work for my 9700. Can someone help me please?

    Thank you very much

    Buskroth

    the link provided should have addressed your question, if you "can't get there from here" - I would suggest that you contact your carrier because they need to move your account password enabled allowing connect you via a non - BB browser to set up your BIS email setting...

Maybe you are looking for

  • Just bought Satellite C660 and need some information please

    I just bought a Toshiba Satellite C660 1 t 1 and have some important questions, I would like to meet you please. I have looked for answers, but could find nothing specific. The first question I have is that when I turned on my new laptop and installe

  • Who is the world PC Tech?

    I received a phone call from a company called world PC Tech. They claim that I download a virus everytime I surf internet.  They wanted to get on the computer with me and help clarify.  Who are, how did get my phone number?  How do they know what I'm

  • update a PC offline, Windows XP SP3

    Hello I need to update a PC that is offline. It has Windows XP SP3. I am aware that I can d/l updates .iso images and is not a problem. However, I have to d/l the updates each month since my last update? As well, if this is the case, how can I know t

  • DeskJet 2544: Printing problem

    My printer prints a Word document, but does not print not an email or anything on the web.  Print pop up option appears out of the box where the print preview is supposed to show just has three dots jumping around and preview impression just never ca

  • Create a homegroup with a windows 7 PC and a windows 10 laptop

    I would like to set up a homegroup with my office windows 7 and my new windows laptop 10. Is it possible easily or different operating systems do this unrealistic?