DB2 log file error: SQL1092N "USERID does not have the authority to perform the requested command or operation"

After you install IBM Db2® Advanced Workgroup Server Edition, if you use the domain user ID to create a new database and tables, you might see an error in the DB2 log files. Follow these steps to enable the domain user ID to access the database.

You cannot use the domain user ID to run the db2cmd command to create a new database and tables. If you do, you might see this error in the DB2 log files:
 SQL1092N "USERID does not have the authority to perform the requested command or operation."
DB2 cannot look up the domain user ID "USERID" as an authorization ID. It ignores the local group for the domain user ID. Even if you add the domain user ID to the local DB2ADMNS group, DB2 does not have the authority to perform database operations.

Resolving the problem

To enable the domain user ID to access the database, complete the following steps.
  1. Add the domain user ID to the local group DB2ADMNS.
  2. With a user having SYSADM privileges or local administrator authority, open a DB2 command window and run the following commands from the prompt. (Alternatively, you can open a DB2 administrator command window.)
    db2set DB2_GRP_LOOKUP=LOCAL,TOKENLOCAL        
    db2 update dbm cfg using sysadm_group DB2ADMNS
    db2stop                                        
    db2start
  3. Restart the DB2 Windows services with the login ID set to the domain user ID.
For additional information, refer to the following DB2 documentation: Considerations for Windows 2008 and Windows Vista or higher: User Access Control feature.