Login failed for user 'user'. Reason: Token-based server access validation…again

You might get the following when working with Managed Service Accounts, or MSAs that connect with SQL Server 2008 R2:

Login failed for user ‘username'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: IP adress]

First off, you might ask what an MSA is. Well, check out the following link and learn a bit about them; you’ll probably be seeing them sooner or later in your shop. Essentially, you would use these instead of a domain account for services such as Exchange or IIS on a particular box.

From the Service Accounts Step-by-Step Guide, they do the following:

“Managed service accounts in Windows Server 2008 R2 and Windows 7 are managed domain accounts that provide the following features to simplify service administration:

• Automatic password management.
• Simplified SPN management, including delegation of management to other administrators. Additional automatic SPN management is available at the Windows Server 2008 R2 domain functional level. For more information, see "Requirements for using managed service accounts and virtual accounts" in this document.”

If using them in an SOA architecture for services, clear the app pool to allow access of the MSAs and then they will be able to connect to SQL Server.

Thanks for reading,
Lee

------------------------------

http://technet.microsoft.com/en-us/library/dd560633(WS.10).aspx

http://technet.microsoft.com/en-us/library/dd548356(WS.10).aspx