Re: xp_cmdshell

From: Hari (hari_prasad_k_at_hotmail.com)
Date: 03/31/04 

Date: Wed, 31 Mar 2004 14:14:50 +0530

Hi,

When xp_cmdshell is invoked by a user who is a member of the sysadmin fixed
server role, xp_cmdshell will be executed under the security context in
which the SQL Server service is running. When the user is not a member of
the sysadmin group, xp_cmdshell will impersonate the SQL Server Agent proxy
account, which is specified using xp_sqlagent_proxy_account. If the proxy
account is not available, xp_cmdshell will fail.

How to set the proxy account:

1. Open enterprise manager and select management options
2. Right click abouve the sql Agent and select properties
3. Select the "job system" option
4. Set the "Non sysadmin job step proxy account
5. There you have give the valid OS level user with previlage.

Thanks
Hari
MCDBA
"Noorali Issani" <naissani@softhome.net> wrote in message
news:uvXz#IvFEHA.4008@TK2MSFTNGP10.phx.gbl...
> I have a user and I want to to give persmission of that user to execute
only
> this XP_CMDSHELL procedure nothing else. Any idea ?
>
> Thanks
> NOOR
>
>
>
>
>
>
>

Relevant Pages

  • Re: execute a stored job through MS ACCESS 2000
    ... If the user is not a sysadmin then the user needs to own the ... job to execute sp_start_job. ... configured the proxy account, the job will fail. ... The proxy account is used for the security context when jobs ...
    (microsoft.public.sqlserver.security)
  • Re: Execute Persmission denied on object sp_OACreate
    ... It is strange though -- in my dev server I did not have to make the owner be ... >> Does Sql Server Agent recognize that a user does not have SysAdmin ... >> priviliges and automatically invoke the proxy account to execute these ... >> proxy account to use in the Job Systems tab of SQL Server Agent ...
    (microsoft.public.sqlserver.security)
  • Re: Using proxy account and msde.
    ... not a member of the local administrator's group for the MSSQLServer service, ... users who are not members of the sysadmin fixed server role cannot execute ...
    (microsoft.public.sqlserver.security)
  • Re: How can I grant user run cmdexec
    ... First you can give grant execute on xp_cmdshell (gtrant execute on ... If they are not a member of the sysadmin role then they execute it under the ... prefix of the SQL Agent Proxy Account. ...
    (microsoft.public.sqlserver.security)
  • Using proxy account and msde.
    ... I have installed a msde in a windows 2003 server r2. ... After that I try to execute the xp_cmdshell but it doesn´t works. ... give sysadmin access to that user It works fine. ...
    (microsoft.public.sqlserver.security)