All about SharePoint best practice... ask me how
Troubleshooting Event 18456 [ Posted on: 20-February-2008 ]

In some MOSS environments you may encounter this error. The Event is noted on the event log as:

Event Type:    Failure Audit
Event Source:    MSSQLSERVER
Event Category:    (4)
Event ID:    18456
Date:        20/02/2008
Time:        12:43:00 p.m.
Computer:    MOSS-WLGWFE001
Login failed for user 'NT AUTHORITY\SYSTEM'. [CLIENT: <local machine>]


The reason for this as I found out is a redundant SQL job related to the SSP database. The SQL server had been used previously to install and test a MOSS pilot and the error was related to a SQL Server Agent Job that was running against a non existent database related to the SSP.

Checking the SQL Log showed me that it was trying to connect to a non existing database.


To get rid of the Error you can disable the Job via SQL Server Agent Jobs or simply delete it.


Posted by Chandima Kulathilake | 3 Comments | Bookmark with:        
Tags: Administration, Deployment, SharePoint 2007

Comments and Feedback
Thursday, 21 Feb 2008 06:49 by Anthony Poole
Hi, I have also come across this problem when you redeploy a MOSS farm, using a different user account or password for the SSP identity. Again deleting the job resolved the problem.
Saturday, 29 Mar 2008 05:55 by Bill Nguyen
Thanks a lot for this tip! Bill
Tuesday, 15 Jul 2008 11:58 by John
I am having this problem also, but I don't have any of the following jobs listed. There are no jobs. The admin says they got rid of everything.
Your Name: (Required)
Website URL:
Your Email:
(Will not be displayed)
Feedback and Comments: (Required)
Are you a person? Please enter the charachters in the box below.

View the privacy policy.

Microsoft MVP (Microsoft Office SharePoint Server)

MCTS - WSS/MOSS Configuration

CKS - Team Member Add to Technorati Favorites

View Chandima Kulathilake's profile on LinkedIn

Kindly hosted by:
Kindly hosted by Intergen

Chandima Kulathilake's Facebook profile