Sometimes in the interviews I observe that users are able to answer all the theoretical questions correct but when it is about doing practical they fail. A while ago, when I was helping a large organization with interview, suddenly their DBA reported that one of their server has installation error. We found this as a great opportunity to test a new candidate and gave him problem to solve. He was successfully able to solve the problem.
Question: How will you fix the installation failure error setup account privileges error in SQL Server?
Answer:
When I clicked on “failed” hyperlink, here is the message.
Here is the text of the message.
—————————
Rule Check Result
—————————
Rule “Setup account privileges” failed.
The account that is running SQL Server Setup does not have one or all of the following rights: the right to back up files and directories, the right to manage auditing and the security log and the right to debug programs. To continue, use an account with both of these rights. For more information, see https://docs.microsoft.com/en-us/previous-versions/ms813696(v=msdn.10), https://docs.microsoft.com/en-us/previous-versions/ms813959(v=msdn.10) and https://docs.microsoft.com/en-us/previous-versions/ms813847(v=msdn.10).
—————————
OK
—————————
I always look at setup logs to see the exact issue. I opened “SystemConfigurationCheck_Report.htm” and below is the failure.
Then I looked into “Detail.txt” and searched for “HasSecurityBackupAndDebugPrivilegesCheck” as shown in above screenshot. Failure is listed below.
(09) 2016-01-28 19:58:11 Slp: Initializing rule : Setup account privileges
(09) 2016-01-28 19:58:11 Slp: Rule is will be executed : True
(09) 2016-01-28 19:58:11 Slp: Init rule target object: Microsoft.SqlServer.Configuration.SetupExtension.FacetPrivilegeCheck
(09) 2016-01-28 19:58:11 Slp: Rule ‘HasSecurityBackupAndDebugPrivilegesCheck’ Result: Running process has SeSecurity privilege, has SeBackup privilege and does not have SeDebug privilege.
(09) 2016-01-28 19:58:11 Slp: Evaluating rule : HasSecurityBackupAndDebugPrivilegesCheck
(09) 2016-01-28 19:58:11 Slp: Rule running on machine: PINALVM1
(09) 2016-01-28 19:58:11 Slp: Rule evaluation done : Failed
As highlighted above, the account which was running setup was missing second one.
SeSecurity: Manage auditing and the security log
SeDebug: Debug Programs
SeBackup: Back up files and directories
To see the “Local Security Policy”, we can go to Start > Run > SecPol.msc or open it from Administrative Tools.
“Debug programs” doesn’t have any user. By default, “Administrators” group is part of it which was removed by me during some hardening. Once I added default account, I have to restart the computer to get forward from that error.
Reference: Pinal Dave (https://blog.sqlauthority.com)
20 Comments. Leave new
Hi I’m not sure whether I’m posting in the right platform but I’m trying to calculate hours worked between 8 – 16:30 excluding weekends, after-hours, holidays, and lunch time. Was able to find help except for excluding lunch hours. How do I exclude lunch hours in my calculation.
When the steps above do not work what do you do?
In my case the permissions reflected only after reboot thanks.
On Windows Server 2012, I am not able to add or remove any group or user for the Debug Programs Policy. The two buttons are greyed out.
@Raj – that happens when they are controlled via group policy. You should contact you domain admin to make that changes.
Jim. if you are unable to Add the Permission, Skip the check by running setup from the command line as so :-
Setup.exe /ACTION=Install /SkipRules=HasSecurityBackupAndDebugPrivilegesCheck
Thanks for the tip, works for me
The above works for me- thanks a lot!
I used: SQLEXPRADV_x64_ENU.exe /ACTION=Install /SkipRules=HasSecurityBackupAndDebugPrivilegesCheck
thank you my hero, i was having a hard time trying to run the installer.
Keiran’s tip worked!
How do you run the setup from the command line? My manage auditing and security log is greyed out. Please help out
You can open command prompt, browse to folder which contains setup.exe and run below command
Setup.exe /ACTION=Install /SkipRules=HasSecurityBackupAndDebugPrivilegesCheck
I have not tested.
hi
i am unable to install sql 2012 and the error is “setup account privileges failed” and when itried to skind the rules through that above given command its not installing properly in between the installation getting error,please tell me any other alternative solution that i can install .
Pinal Dave Please give me your email id that i can forward the error screen shot which i got after running that command”Setup.exe /ACTION=Install /SkipRules=HasSecurityBackupAndDebugPrivilegesCheck”
it is pinal @ sqlauthority.com
If it can help someone :
I had to go out of the AD to be able to install sqlserver without debug rights.
After that you can reintegrate the AD.
Why doesn’t the article complete the details? *HOW* do I continue to fix the problem???
Worked for me:
press Win + R to open cmd.
browse to the folder of the SQL instalation, in my case “C:\SQL2019\ExpressAdv_ENU” with this command:
cd C:\SQL2019\ExpressAdv_ENU
A new line will be created waiting for the command:
Setup.exe /ACTION=Install /SkipRules=HasSecurityBackupAndDebugPrivilegesCheck
Press enter, enjoy.
Unable to add permission in that case how to uninstall SQL server instance.
This has been very useful! Thank you!