Error 18456 with logon using Windows accounts

Hi,
I've installed SQL 2000 SP3 on a Windows 2000 server with Active Directory (not the PDC), but when I try to logon using a Windows account (domain\user) I get the following error:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
SQL State: 28000
DB error: 18456
The same happens when I try to logon with the Query Analyzer or register the server in Enterprise Manager. I looked around other forums to figure this one out but none of the tips there worked:
- Authentication is mixed mode
- IIS is not installed
- There is a login created in SQL for the Windows user

Any idea's?In the back of my mind somewhere, I have a recollection that when AD is installed the Local Users for that server are disabled. Was the user you were trying to log in as Local or Domain?

I think I would try creating a Domain User, adding that user into the Local Computer Administrators group and then logging in as that Domain User.

Regards,

Hugh Scott

Originally posted by dbJeff
Hi,
I've installed SQL 2000 SP3 on a Windows 2000 server with Active Directory (not the PDC), but when I try to logon using a Windows account (domain\user) I get the following error:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
SQL State: 28000
DB error: 18456
The same happens when I try to logon with the Query Analyzer or register the server in Enterprise Manager. I looked around other forums to figure this one out but none of the tips there worked:
- Authentication is mixed mode
- IIS is not installed
- There is a login created in SQL for the Windows user

Any idea's?|||Hugh, you're right that Local Users are disabled with AD, but Local Groups are as well. Any other idea's?

Originally posted by hmscott
In the back of my mind somewhere, I have a recollection that when AD is installed the Local Users for that server are disabled. Was the user you were trying to log in as Local or Domain?

I think I would try creating a Domain User, adding that user into the Local Computer Administrators group and then logging in as that Domain User.

Regards,

Hugh Scott|||D'oh! That wasn't very smart of me!

Did you try using sp_grantaccess to ensure that the domain account you were trying to use can access the server?

I don't have much experience running SQL Server with AD; I am running a home network with AD and SQL running on the PDC. I am authenticating using a local account on my Windows XP notebook with no problems. Before I promoted the server to DC, I had a local account with identical credentials in the Administrators group. I have had no problems keeping that account up and running.

I'm afraid I don't have many other suggestions...sorry.

Regards,

Hugh

Originally posted by dbJeff
Hugh, you're right that Local Users are disabled with AD, but Local Groups are as well. Any other idea's?