Problem

Could not obtain information about Windows NT group/user 'DOMAIN_NAME\user_name', error code 0x5.

 

The above error can appear when users which are not members of sysadmin server role try to:

-          Execute a SQL job which is not owned by sa or by the user under SQL Server is running

-          Edit a SQL job

-          Any operation that implies the  execution of the external system stored procedure xp_logininfo


xp_logininfo 'DOMAIN_NAME\user_name'

 

 

Solution

  1. A solution for this problem is to create an AD Security Group and make it a member of Pre-Windows 2000 Compatible Access group. Add the domain account under which SQL Server is running to this new group. 
  2. Activate Kerberos
  3. Create SPN (service principal name)
  4. Configure the account under which SQL Server is running to use Kerberos with full delegation:

 

It seems that the user under which SQL Server is running was unable to delegate the user which was trying to execute the xp_logininfo stored procedure.

 


No feedback yet