Microsoft.SqlServer.Configuration.SqlEngine.ValidationException: The specified credentials for the SQL Server service are not valid. To continue, provide a valid account and password for the SQL Server service.
Below message will be logged in details
Sco.User.LookupADEntry - Attempting to find user account ABC\xxxx
Slp: Sco: Attempting to check if container 'WinNT://ABC' of user account exists
Slp: UserSecurity.ValidateCredentials -- Exception caught and ignored, exception is Access is denied.
Slp: UserSecurity.ValidateCredentials -- user validation failed
This error is due to lack of permission in AD.
The account requires Create Computer objects and Read All Properties permissions in the container that is used for computer accounts in the AD.
- On a domain controller, click Start, click Administrative Tools, and then click Active Directory Users and Computers. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
-
On the View menu, make sure that Advanced Features is selected.
When Advanced Features is selected, you can see the Security tab in the properties of accounts (objects) in Active Directory Users and Computers. - Right-click the default Computers container or the default container in which computer accounts are created in your domain, and then click Properties. Computers is located in Active Directory Users and Computers/domain node/Computers.
- On the Security tab, click Advanced.
- Click Add, type the name of the account and then click OK.
-
In the Permission Entry for container dialog box, locate the Create Computer objects and Read All Properties permissions, and make sure that the Allow check box is selected for each one.
