How to fix Error 3110 on Windows Server 2025 / Windows 11

by

Troubleshooting Guide: Error 3110 – User Does Not Have Permission to RESTORE Database

Why This Error Happens

Error 3110 occurs when the login attempting the RESTORE operation lacks the necessary db_owner, sysadmin, or dbcreator role membership required to perform restore operations in SQL Server 2025. This typically happens because the database being restored over has specific ownership permissions that don’t match the current login’s security context, or the login is missing from the sysadmin fixed server role entirely. Additionally, if the restore target is a new database, the login may lack the CREATE DATABASE or ALTER ANY DATABASE permission at the server level.

Step-by-Step Resolution Guide

Step 1: Verify Current Login Permissions

  • Open SQL Server Management Studio (SSMS) and connect using an account with known sysadmin access.
  • Run the following query to check the current login’s role memberships:
SELECT IS_SRVROLEMEMBER('sysadmin');
SELECT IS_SRVROLEMEMBER('dbcreator');
  • A result of 0 for both indicates the login has insufficient privileges to restore databases.

Step 2: Grant Appropriate Server-Level Roles

  • Using an administrative account, execute the following to add the user to the dbcreator role (minimum requirement for restore operations):
USE master;
ALTER SERVER ROLE dbcreator ADD MEMBER [DOMAIN\Username];
  • For full restore capabilities including overwriting existing databases, add the user to sysadmin instead:
ALTER SERVER ROLE sysadmin ADD MEMBER [DOMAIN\Username];
  • On Windows Server 2025, ensure the Windows account or group is properly resolved via Active Directory by checking Server Properties > Security in SSMS.

Step 3: Check Database Ownership Conflicts

  • If restoring over an existing database, verify the current database owner using:
SELECT suser_sname(owner_sid) AS DBOwner FROM sys.databases WHERE name = 'YourDatabaseName';
  • If the owner differs from the account performing the restore, reassign ownership temporarily:
ALTER AUTHORIZATION ON DATABASE::YourDatabaseName TO sa;
  • Confirm the SQL Server service account has read/write access to the backup file location (e.g., C:\Program Files\Microsoft SQL Server\MSSQL17.MSSQLSERVER\MSSQL\Backup\).

Step 4: Validate File System Permissions (Windows Server 2025 / Windows 11)

  • Right-click the backup folder path and select Properties > Security.
  • Ensure the SQL Server service account (e.g., NT Service\MSSQLSERVER) has Read & Execute and Write permissions on the backup directory.
  • Restart the SQL Server service via Services.msc or PowerShell if permissions were modified:
Restart-Service -Name 'MSSQLSERVER'

Alternative or Verification Steps

  • To verify the fix, log in with the affected account and re-run the RESTORE DATABASE command; it should complete without Error 3110.
  • If the issue persists, use the sa account or a sysadmin-equivalent login to perform the restore directly, then transfer database ownership back to the intended user afterward using ALTER AUTHORIZATION.