After upgrading ChangeAuditor to the newest version, the Coordinator starts then stops. The following messages are found in the Coordinator log (C:\Program files\Quest Software\ChangeAuditor\Service\ChangeAuditor.Service.exe.nptlog).
Error The SELECT permission was denied on the object 'sysjobs', database 'msdb', schema 'dbo'. on line 1499 executing SQL:
SQL error(229): The SELECT permission was denied on the object 'sysjobs', database 'msdb', schema 'dbo'.;command: Quest-ChangeAuditor-Data.sql
Database initialization not successful on ChangeAuditor. The SELECT permission was denied on the object 'sysjobs', database 'msdb', schema 'dbo'.
Stopping ChangeAuditor Service...
This is caused when the service account specified in the Coordinator Database Configurator (right-click and select it from the Coordinator system tray icon, or run C:\Program Files\Quest Software\ChangeAuditor\Service\ConfigureDatabase.exe) does not have the proper rights to the msdb database because the rights were stripped for security reasons after the initial install .
NOTE: These rights are also needed to create and run Purge\Archive jobs
In order for ChangeAuditor to upgrade or create/run Purge/Archive jobs. The service account specified in the Coordinator Database Configurator (right-click and select it from the Coordinator system tray icon, or run C:\Program Files\Quest Software\ChangeAuditor\Service\ConfigureDatabase.exe) requires the following permissions:
• Active Directory permissions to create and modify SCP (Service Connection Point) objects under the computer object that will be running a ChangeAuditor Coordinator.
• Local Administrator permissions on the coordinator server. SQL Server database access account specified during installation: An account must be created to be used by the Coordinator service on an ongoing basis for access to the SQL Server database. This account must have a SQL Login and be assigned the following SQL permissions:
• Must be assigned the db_owner role on the ChangeAuditor database
• Must be assigned the SQL Server role of dbcreator
• Must be assigned the following database roles in the msdb database:
• db_datareader
• db_datawriter
• SQLAgentUserRole
Confirm the above criteria is met and restart the Coordinator Service.
© 2021 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy