Microsoft SQL Server could not save the security changes

Answered Microsoft SQL Server could not save the security changes

  • Monday, December 31, 2012 9:25 AM
     
     

    I have this error running MS Sync Centre on a Win 7 machine,
    My replication model works OK on XP
    The instance at the Subscriber is SQLEXPRESS 2008 r2
    all 3 logins Distributor, Subscriber and Publisher are Windows Authentication
    I am using my login which has Full permission and I have tried running Sync Centre as administrator all return the same error

    I have successfully created and run a subscription on the same machine with an instance of SQL Server standard and that works OK as well

    I have spent some time searching but not found anything which solves the problem

    any help anyone?

    Thanks in advance and happy New year


    jnc


    • Edited by jnc Monday, December 31, 2012 9:26 AM
    •  

All Replies

  • Monday, December 31, 2012 7:51 PM
    Moderator
     
     Answered

    Hi jnc,

    I've encountered this error before and was able to resolve by following the resolution here:  Windows Sync Manager shows error message "Microsoft SQL Server could not save the security changes" when specifying user/password for publisher/distributor

    I recommend examining the Process Monitor logs for ACCESS DENIED results and granting appropriate permissions to denied registry keys.


    Brandon Williams (blog | linkedin)

    • Marked As Answer by jnc Wednesday, January 02, 2013 2:47 PM
    •  
  • Monday, December 31, 2012 10:32 PM
     
     

    NYE 10:30 UK ha ha so sad but much appreciated thanks.

     I have made my login full control on regedit.exe and reg.exe and no difference. I am still sure it is a permissions problem


    jnc

  • Monday, December 31, 2012 10:34 PM
    Moderator
     
     
    Did you monitor the Process Monitor logs for ACCESS DENIED?

    Brandon Williams (blog | linkedin)

  • Monday, December 31, 2012 11:14 PM
     
     

    No I assumed that giving myself full control would do the trick, wrong?

    unfortunately I am away at the moment i will try when I get back

    Thanks again


    jnc

  • Tuesday, January 01, 2013 1:50 AM
    Moderator
     
     

    It is hard to say for sure, Process Monitor should reveal more.

    Locate the entries regarding RegCreateKey and RegOpenKey for ACCESS DENIED.


    Brandon Williams (blog | linkedin)

  • Wednesday, January 02, 2013 1:19 PM
     
     

    I hope you had a nice NYE

    In Process Monitor There, was a write problem resulting in 'ACCESS DENIED'

    I was able to correct that and it 'saved' the change from SQL Server Authentication to Windows Authentication, however, that led onto another problem 'The Process could not connect to Distributor xxx'

    This Win7 subscription is set up identically to the XP subscription except for the merge agent user where the machine name changes 'XP machine name\repl_merge' now 'Win7 machine name\repl_merge' even the passwords are the same
    I have run Sync Centre under administrator
    I have tured my firewall and internet security off
    none make any difference

    so where should I be looking?


    jnc

  • Wednesday, January 02, 2013 1:23 PM
     
     
    Do you see any login failed error in the SQL errorlog?
  • Wednesday, January 02, 2013 1:53 PM
     
     

    Thanks

    the only current ERRORLOG (at the time of an attempted Syncro) : "2013-01-02 13:45:31.93 Server      Server resumed execution after being idle 44 seconds: user activity awakened the server. This is an informational message only. No user action is required."

    I am looking in C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS_R2\MSSQL\Log
    Is this the wrong place?


    jnc

  • Wednesday, January 02, 2013 7:07 PM
     
     Answered

    To add some closure

    I have successfully synchronised on the Windows 7 machine the reason I would not work before was the merge agent security

    on the XP machine I used a user repl_merge in Sync Manager I set the passwords to Windows Authenticated which all works fine.

    so I copied that in the Win 7 machine

    It would not work returning 'The Process could not connect to Distributor xxx'

    The answer was to use 'sa' for the merge agent security and 'sa' for both of the users in Sync Manager

    Thanks to everyone who showed an interest, doesn't help me undertand why with one and not the other though 


    jnc

    • Marked As Answer by jnc Wednesday, January 02, 2013 7:07 PM
    •