Re: Operating System Command (CmdExec) will not run from Job Agent

From: ryanlence (ryanlence_at_discussions.microsoft.com)
Date: 01/07/05


Date: Fri, 7 Jan 2005 08:17:03 -0800

I created a proxy account, from what I understand SQL Server should only need
to use the account if the job owner is not a member of sa.

Having created a proxy account who is a memeber of the local admin group I
now get a new error message saying.

Step 1 of job 'DTSRun' (0x0F9B5D8784E34341960EC066AE7E7858) has caused an
exception in the CmdExec subsystem and has been terminated.

Any Ideas

"Andrew J. Kelly" wrote:

> If you look in the Job history you will see a checkbox labeled "show job
> steps" (or similar). This should give you more details. But it is most
> likely a permissions issue. Can you get dir to work using xp_cmdshell?
>
> exec master..xp_cmdshell 'DIR *.*'
>
> I assume you are running SQL 2000? If so there are two accounts that may
> need permissions to do what you are asking. They are outlined in the KB
> article. One is the account SQL Agent is running under and the other is the
> Proxy depending on how you are running the job or what role the user is in.
>
> --
> Andrew J. Kelly SQL MVP
>
>
> "ryanlence" <ryanlence@discussions.microsoft.com> wrote in message
> news:6E3CC620-119D-40B9-B38A-6E541E9BEEC9@microsoft.com...
> > Thanks for the link. It did help me learn more about sql server but did
> > not
> > really help me fix my issue.
> >
> > Even if I try to run simply dir from the SQL Job Agent I will get the
> > listed
> > error.
> >
> > Ryan
> >
> > "Andrew J. Kelly" wrote:
> >
> >> See if this helps:
> >> http://www.support.microsoft.com/?id=269074
> >>
> >> --
> >> Andrew J. Kelly SQL MVP
> >>
> >>
> >> "Ryan M. Lence" <Ryan M. Lence@discussions.microsoft.com> wrote in
> >> message
> >> news:4F673B02-5757-4DD5-9FE8-2259ACFE6EEC@microsoft.com...
> >> >I am simply trying to run DTSrun.exe from the Job Agent in SQL Server
> >> >and
> >> > everytime it Says that the job failed.
> >> >
> >> > The job failed. The Job was invoked by User CHQPVUW0806\LenceRM. The
> >> > last
> >> > step to run was step 1 (cmd).
> >> >
> >> > The step failed.
> >> >
> >> > This happens every if I just try to run dir or and other command.
> >> >
> >> > My backup jobs are working, and other jobs that do not need CmdExec.
> >> >
> >> > Help,
> >>
> >>
> >>
>
>
>



Relevant Pages

  • Re: SQL account rights
    ... Please advice what is the best, suitable rights rather than domain admin ... Warren Brunk - MCITP - SQL 2005, ... Add it as a login to the SQL Server ... files, or backups, make sure that the service account has Full ...
    (microsoft.public.sqlserver.security)
  • Re: User authentication
    ... There are 2 SQL Server 2005 ... 1 SQL Server 2000 installed on another server ... Windows account instead to run backup jobs. ...
    (microsoft.public.sqlserver.clients)
  • RE: xp_cmdshell, Access Denied, Further Investigation Reveals
    ... As i tried to explain the Agent proxy account has Admin rights, ... this share and security tab show the admin group in with this user ... This is not just a problem with SQL if you read below i used ... > member of the sysadmin group, xp_cmdshell will impersonate the SQL Server ...
    (microsoft.public.sqlserver.security)
  • Re: SQL 2000 Server gets hacked
    ... Thank you Beth. ... > placed a strong password on the 'sa' account?) ... Your SQl Service itself shouldn't be running as a ... (SQL Agent requires more, but not SQL Server). ...
    (microsoft.public.sqlserver.security)
  • Re: SQL 2000 Server gets hacked
    ... Thank you Beth. ... > placed a strong password on the 'sa' account?) ... Your SQl Service itself shouldn't be running as a ... (SQL Agent requires more, but not SQL Server). ...
    (microsoft.public.sqlserver.security)