# IFW - MSSQL Integrated Security

**URL:** <https://community.icinga.com/t/ifw-mssql-integrated-security/13537>\
**Category:** Icinga for Windows\
**Tags:** ifw, icinga2\
**Created:** [April 25, 2024, 12:33pm UTC](https://community.icinga.com/t/ifw-mssql-integrated-security/13537 "2024-04-25T12:33:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lrk](https://community.icinga.com/letter_avatar_proxy/v4/letter/l/65b543/32.png) [@lrk](https://community.icinga.com/u/lrk)\
**Post date:** [April 25, 2024, 12:33pm UTC](https://community.icinga.com/t/ifw-mssql-integrated-security/13537/1 "2024-04-25T12:33:05Z")

</div>

Hello

I have a problem with the MSSQL plugins for Icinga For Windows.  
I want to use Integrated Security. The Powershell Service and Icinga Agent are running with a domain user.

When I run the check with Icinga I get this response:  
 ![image](https://community.icinga.com/uploads/default/original/2X/e/e49b0efac37a14800ad10fb5f26b3ba3d8171f38.png)

When I run a powershell with the service user the check works:

 ![image](https://community.icinga.com/uploads/default/original/2X/9/9232beca7505e2b44852334757d2886c69c12634.png)

The service looks like this:

 ![image](https://community.icinga.com/uploads/default/original/2X/7/75baf5d1391f82ee3b8edf9b6e35edf2875110cc.png)

Thanks for your help!

---

<div class="post-metadata">

**Author:** ![cstein](https://community.icinga.com/user_avatar/community.icinga.com/cstein/32/7745_2.png) [@cstein](https://community.icinga.com/u/cstein)\
**Post date:** [March 31, 2025, 2:51pm UTC](https://community.icinga.com/t/ifw-mssql-integrated-security/13537/2 "2025-03-31T14:51:46Z")

</div>

Hello

Thank you for your post. Is the domain user which is used for the Icinga Agent/Icinga for Windows service allowed to access the MSSQL database?

If not, the integrated security will not work, as it will try to authenticate with the user the services are running with.

However, if you are running JEA, you cannot use IntegratedSecurity, because then the entire session and plugins are running in a system/computer context, with no real user session assigned.