Configuration Wizard fails to create SolarWindsFlowStorage database with "CREATE FILE error 5 (Access is denied) on E:\MSSQL13.ORION_DATABASE\MSSQL\DATA"

4/2/2026 8:49 PM

4/2/2026 8:49 PM

Running the SolarWinds Configuration Wizard (NTA / Flow Storage step) fails when creating or updating the SolarWindsFlowStorage database. The wizard reports a SQL Server error similar to:

CREATE FILE encountered operating system error 5(Access is denied.) while attempting to open or create the physical file 'E:\MSSQL13.ORION_DATABASE\MSSQL\DATA\SolarWindsFlowStorage.mdf'.

As a result, the NTA Flow Storage database is not created or updated successfully.

Network Performance Monitor

The SQL Server instances for Orion and NTA are running under local virtual service accounts:
NT SERVICE\MSSQL$ORION_DATABASE
NT SERVICE\MSSQL$NTA_DATABASE

These accounts:
Exist only on the local SQL server, not in Active Directory.
Do not have the required NTFS permissions on the target data path:
E:\MSSQL13.ORION_DATABASE\MSSQL\DATA

When SQL tries to create the SolarWindsFlowStorage database files in that folder, the missing NTFS rights result in OS error 5 (Access is denied) and the Configuration Wizard fails.

The confusion usually comes from:
Trying to select these accounts while the Location is set to the domain instead of the local server.
Using PowerShell with $ in the account name without quoting correctly, causing parser errors.

Grant the SQL Server service accounts Modify (or higher) NTFS permissions on the data folder used for SolarWindsFlowStorage.

1. Confirm SQL Server service accounts

On the SQL server:

1. Open SQL Server Configuration Manager.

2. Go to SQL Server Services.

3. Note the Log On As for:

   • SQL Server (ORION_DATABASE) → typically NT SERVICE\MSSQL$ORION_DATABASE

   • SQL Server (NTA_DATABASE) (if present) → typically NT SERVICE\MSSQL$NTA_DATABASE

These are the accounts that must have NTFS rights on the data folder.

---

2. Grant NTFS permissions using icacls (recommended)

On the SQL server, open Command Prompt as Administrator and run:

icacls "E:\MSSQL13.ORION_DATABASE\MSSQL\DATA" /grant "NT SERVICE\MSSQL$ORION_DATABASE:(OI)(CI)M" "NT SERVICE\MSSQL$NTA_DATABASE:(OI)(CI)M"

Then verify:

icacls "E:\MSSQL13.ORION_DATABASE\MSSQL\DATA"

You should see entries for:

• NT SERVICE\MSSQL$ORION_DATABASE

• NT SERVICE\MSSQL$NTA_DATABASE

with at least M (Modify) on the folder (and inherited by child items).

Note:
If you run this from PowerShell, quote the arguments and do not use CMD-style line continuation:

icacls 'E:\MSSQL13.ORION_DATABASE\MSSQL\DATA' /grant 'NT SERVICE\MSSQL$ORION_DATABASE:(OI)(CI)M' 'NT SERVICE\MSSQL$NTA_DATABASE:(OI)(CI)M'

---

3. (Alternative) Grant NTFS via GUI with correct Location/Object Types

If using the GUI instead of icacls, this must be done directly on the SQL server, not from a remote machine via UNC:

1. On the SQL server, open File Explorer and browse to:
   E:\MSSQL13.ORION_DATABASE\MSSQL\DATA

2. Right-click DATA → Properties → Security → Edit… → Add….

3. In the Select Users, Computers, Service Accounts, or Groups dialog:

   • Click Object Types… and make sure Service Accounts is checked.

   • Click Locations… and select the local server name (not the AD domain).

4. In Enter the object names to select, add:

   • NT SERVICE\MSSQL$ORION_DATABASE

   • NT SERVICE\MSSQL$NTA_DATABASE

5. Click Check Names → they should resolve.

6. For each account, grant Modify (or Full control, per policy).

7. Apply and close.

---

4. Re-run the Configuration Wizard

After permissions are in place:

1. Re-run the SolarWinds Configuration Wizard (NTA / Flow Storage step).

2. Confirm:

   • The wizard completes successfully.

   • The SolarWindsFlowStorage database is created/updated on the intended SQL instance.

   • NTA Flow Storage appears online and NTA resources function in the SolarWinds Platform web console.