Unable to configure protection with SQL Server 2012

January 19, 2013 at 9:18 am in Uncategorized by mikeresseler


While working on some scenario’s to protect SQL Server 2012 SP1 with System Center 2012 Data Protection Manager SP1 I received an error notification in my DPM console


The error stated that after creating a protection group it was unable to configure protection.

I’ve been looking through various logs until I found the following under the DPM Alerts logs in the Event Viewer of the SCDPM box

DPM could not start a recovery, consistency check, or initial replica creation job for  SRV-SPF-WWR\Belgium on SRV-SPF-WWR.infronteurope.com for following reason:
(ID: 3170)
The DPM job failed for  SRV-SPF-WWR\Belgium on SRV-SPF-WWR.infronteurope.com because the protection agent did not have sysadmin privileges on the SQL Server instance. (ID: 33424)

Now this is something new.

After doing some more investigation, it seems that SQL 2012 is a bit more hardened then the previous versions and the NT AUTHORITY\SYSTEM does not have sysadmin rights on a SQL instance.

With this procedure you can change that.

1. Log on to the Microsoft SQL Server Management Studio

2. Connect to the correct instance

3. Go to Security > Server Roles, and right-click on sysadmin and choose Properties

4. Press the Add button


5. Add the NT Authority\System account to the role and press OK


6. Modify the Protection Group (rerun through the protection group and on the last page of the wizard say Update Group without making any other changes)