Troubleshooting Event 18456 - Chandima.Net Blog for SharePoint solutions

Troubleshooting Event 18456 [ Posted on: 20-February-2008 ]

In some MOSS environments you may encounter this error. The Event is noted on the event log as:

Event Type:    Failure Audit
Event Source:    MSSQLSERVER
Event Category:    (4)
Event ID:    18456
Date:        20/02/2008
Time:        12:43:00 p.m.
User:        NT AUTHORITY\SYSTEM
Computer:    MOSS-WLGWFE001
Description:
Login failed for user 'NT AUTHORITY\SYSTEM'. [CLIENT: <local machine>]

The reason for this as I found out is a redundant SQL job related to the SSP database. The SQL server had been used previously to install and test a MOSS pilot and the error was related to a SQL Server Agent Job that was running against a non existent database related to the SSP.

Checking the SQL Log showed me that it was trying to connect to a non existing database.

To get rid of the Error you can disable the Job via SQL Server Agent Jobs or simply delete it.

Technorati Tags: MOSS,SQL,Event 18456,Administration,SharePoint

Posted by Chandima Kulathilake | 3 Comments | Bookmark with:

Tags: Administration, Deployment, SharePoint 2007

Comments and Feedback

Thursday, 21 Feb 2008 06:49 by Anthony Poole

Hi, I have also come across this problem when you redeploy a MOSS farm, using a different user account or password for the SSP identity. Again deleting the job resolved the problem.

Saturday, 29 Mar 2008 05:55 by Bill Nguyen

Thanks a lot for this tip! Bill

Tuesday, 15 Jul 2008 11:58 by John

I am having this problem also, but I don't have any of the following jobs listed. There are no jobs. The admin says they got rid of everything.

Your Name: (Required)
Website URL:
Your Email: (Will not be displayed)
Feedback and Comments: (Required)
Are you a person?	Please enter the charachters in the box below.


View the privacy policy.