Beware Windows 2003 SP2 (Especially if using DTC)

If you are using Distributed Transaction Co-ordinator to manage MS SQL server cross-server transactions across machines which are not in the same domain, be careful when installing Windows 2003 SP2.

To enable cross domain SQL transactions using DTC, it is necessary to drop the required security from "Mutual Authentication Required" to "No Authentication Required".

Quite helpfully, installing Windows 2003 SP2 will cause the security settings for DTC to be reset to the default - "Mutual Authentication Required" - preventing Distributed transactions from occuring.

SQL server will give a really helpul message along the lines of "Unable to enlist in transaction" (which is the same message you get if there are any network issues between the 2 servers).

Only took me 5.5 hours to spot what the issue was - Thanks Microsoft :P

Comments (Comment Moderation is enabled. Your comment will not appear until approved.)
Steve's Gravatar This got us with an eRoom installation.

Well done. thank you.
(only took us 24 hours to find this and half an hour to fix it with this info.)
# Posted By Steve | 08/07/08 02:42
Marc's Gravatar Great information. It took us less time because we actually faced the same issue with SP1.
In Win 2003 pre SP1, there are no options about these security settings. SP1 braught these options and automatically sets the Mutual Auth...
We discovered that SP2 braught back the option to Mutual which is a pain!!! As you said, thanks Microsoft !!
# Posted By Marc | 31/10/08 23:11
BlogCFC was created by Raymond Camden. This blog is hosted by DotLance Ltd.