Share via

Patching is breaking the Master Database of SQL Server Installed

Tendongho, Charles 0 Reputation points
2025-07-29T17:16:10.94+00:00

Hello,

I am operating Microsoft SQL Server 2019 Enterprise Edition within our environment. One of our SQL Server instances, which is hosted on a virtual machine (VM), has SQL Server Integration Services (SSIS) installed. We’ve encountered a recurring issue during patching operations on this server.

Each time the host is patched, the SQL Server instance fails to start. The root cause appears to be tied to a failed upgrade process involving the MS_SSISServerCleanupJobLogin account. Specifically, the error message indicates that the login lacks sufficient privileges, which results in a failure to upgrade system objects in the master database. Consequently, SQL Server does not start, and the failure is logged in the Windows Event Viewer.

To troubleshoot the issue, I reverted to a pre-patch snapshot of the VM and created a clone of the SQL Server instance to serve as a test environment. On the cloned instance, I explicitly granted the necessary permissions to the MS_SSISServerCleanupJobLogin account. I then re-applied the patch to the clone, and this time the patch was successfully applied without any errors.

However, I observed that the permission changes made on the cloned instance unexpectedly propagated to the production instance. This raises concerns about the underlying isolation between the two environments.

I am seeking clarification on the following:

Is the patch failure solely attributable to insufficient privileges assigned to the MS_SSISServerCleanupJobLogin login, or could there be additional underlying factors that need to be addressed?

Under what circumstances would changes made on a cloned SQL Server VM reflect back on the original (production) instance? Could this be related to shared virtual disks, improper cloning, or some other configuration issue?

SQL Server Database Engine
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Erland Sommarskog 124.2K Reputation points MVP Volunteer Moderator
    2025-07-29T19:12:15.43+00:00

    I can't really speak to any of the issues, but I post nevertheless.

    When it comes to the first issue, the sad story is that although I am known as an SQL Server expert, I have never worked with SSIS. I have SSIS installed, but I don't have this login. I guess this is a login you get when you set up SSISDB (which I have not). I doubt that Microsoft would create the account with insufficient permissions, so if the account is missing required permissions, I'm inclined to suspect that someone locally has gone on a lockdown craze and removed one permission too many. Whether that could be more reasons involved, I can't say, as I have no knowledge about that update step. (There is another, more general, update script which is known to cause issues every now and then. But this script does not refer to ##MS_SSISServerCleanupJobLogin##.

    For the second question, that is a question you would need to ask in a forum related to your virtualisation product. Although, without further knowledge, I am inclined to blame human intervention.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.