Hello Guys,
I am trying to see who executed the following command. what is SYSTEM@NT ID ? Sorry guys I am new to Windows.
2014/10/10 1:12:04 VCS INFO V-16-1-50135 User (system1_sql\Administrators):SYSTEM@NT AUTHORITY fired command: hagrp -offline database_sg1 system1_sql from 127.0.0.1
I found it guys, it was started by hatrigger script which was configured.
I found it guys, it was started by hatrigger script which was configured.
Hi Mokkan,
The SYSTEM account is a built in windows account that only has access to the local system and no access to remote servers. Most Windows services run with this account. Most of SFW-HA services also run with this account. The HAD Helper Service is an exception to this as it runs with a domain account. This is used to elevate execution permissions for resources that need to operate with remote servers. Lanman is an example of this as it can be configured to update a remote DNS server.
Thank you,
Wally
