FDLauncher cannot be stopped automatically

Published Mar 30 2022 06:03 AM 569 Views
Microsoft

If you are using Full text index, then you should have a service named 'MSSQLFDLauncher', and usually it should be stopped automatically when you stop SQL Server serivce. This is the expected behavior because SQL Server will send request to service control manager to stop the FDlauncher.

YueJ_7_0-1648645300762.png

 

 

But recently I'm trying to configure my SQL Server service account with the GMSA account, however, when I stopped SQL Server, the FDLauncher was not stopped automatically. So I collected a service ETL log, and found below errors:

[6] 0008.41C8::03/07/22-14:00:27.5646147 [SCM] scopen_cxx1027 ScOpenService() - ScOpenService: ScAccessValidate Failed 5, service MSSQLFDLauncher

 

The GMSA account was configured with all of the permissions required by below public doc before I used it,

https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-acc... 

 

But seems it requires more priviledge to control the service, so after a short time research, I got to know how to grant the permission to control a service, we have several ways actually:

http://woshub.com/set-permissions-on-windows-service/#:~:text=How%20to%20Allow%20Non%20Admin%20Users...

 

After granted the 'Read Control','Service Start','Service Stop' permission to the account, the FDlauncher can be stopped correctly.

%3CLINGO-SUB%20id%3D%22lingo-sub-3271412%22%20slang%3D%22en-US%22%3EFDLauncher%20cannot%20be%20stopped%20automatically%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3271412%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20you%20are%20using%20Full%20text%20index%2C%20then%20you%20should%20have%20a%20service%20named%20'MSSQLFDLauncher'%2C%20and%20usually%20it%20should%20be%20stopped%20automatically%20when%20you%20stop%20SQL%20Server%20serivce.%20This%20is%20the%20expected%20behavior%20because%20SQL%20Server%20will%20send%20request%20to%20service%20control%20manager%20to%20stop%20the%20FDlauncher.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22YueJ_7_0-1648645300762.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F359871iDB8A418D242F333A%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22YueJ_7_0-1648645300762.png%22%20alt%3D%22YueJ_7_0-1648645300762.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBut%20recently%20I'm%20trying%20to%20configure%20my%20SQL%20Server%20service%20account%20with%20the%20GMSA%20account%2C%20however%2C%20when%20I%20stopped%20SQL%20Server%2C%20the%20FDLauncher%20was%20not%20stopped%20automatically.%20So%20I%20collected%20a%20service%20ETL%20log%2C%20and%20found%20below%20errors%3A%3C%2FP%3E%0A%3CP%3E%5B6%5D%200008.41C8%3A%3A03%2F07%2F22-14%3A00%3A27.5646147%20%5BSCM%5D%20scopen_cxx1027%20ScOpenService()%20-%20%3CSTRONG%3EScOpenService%3C%2FSTRONG%3E%3A%20%3CSTRONG%3EScAccessValidate%20Failed%205%3C%2FSTRONG%3E%2C%20service%20MSSQLFDLauncher%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20GMSA%20account%20was%20configured%20with%20all%20of%20the%20permissions%20required%20by%20below%20public%20doc%20before%20I%20used%20it%2C%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsql%2Fdatabase-engine%2Fconfigure-windows%2Fconfigure-windows-service-accounts-and-permissions%3Fview%3Dsql-server-ver15%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsql%2Fdatabase-engine%2Fconfigure-windows%2Fconfigure-windows-service-accounts-and-permissions%3Fview%3Dsql-server-ver15%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBut%20seems%20it%20requires%20more%20priviledge%20to%20control%20the%20service%2C%20so%20after%20a%20short%20time%20research%2C%20I%20got%20to%20know%20how%20to%20grant%20the%20permission%20to%20control%20a%20service%2C%20we%20have%20several%20ways%20actually%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fwoshub.com%2Fset-permissions-on-windows-service%2F%23%3A~%3Atext%3DHow%2520to%2520Allow%2520Non%2520Admin%2520Users%2520to%2520Start%2Cway%2520to%2520manage%2520service%2520permissions%2520is...%2520See%2520More%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwoshub.com%2Fset-permissions-on-windows-service%2F%23%3A~%3Atext%3DHow%2520to%2520Allow%2520Non%2520Admin%2520Users%2520to%2520Start%2Cway%2520to%2520manage%2520service%2520permissions%2520is...%2520See%2520More%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAfter%20granted%20the%20'Read%20Control'%2C'Service%20Start'%2C'Service%20Stop'%20permission%20to%20the%20account%2C%20the%20FDlauncher%20can%20be%20stopped%20correctly.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Mar 30 2022 06:03 AM
Updated by: