Re: xp_cmdshell right for non sysadmin

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 04/06/04


Date: Tue, 06 Apr 2004 13:20:44 -0600

You can get the error when the SQL Server service account
does not have the necessary permissions to change security
context. If you change your SQL Server service accounts
using Enterprise Manager, the correct permissions will be
given to the service account. If you use another method to
change the service accounts (i.e. the services applet) you
won't necessarily get the correct permissions and rights
assigned to the service account. You can reset your service
account though Enterprise Manager or refer to the following
for permissions that are needed:
HOW TO: Change the SQL Server or SQL Server Agent Service
Account Without Using SQL Enterprise Manager in SQL Server
2000
http://support.microsoft.com/?id=283811

-Sue

On Tue, 6 Apr 2004 11:31:23 -0700, "mikew"
<anonymous@discussions.microsoft.com> wrote:

>Hi, All.
>This is a win2k and SQL2k server.
>I have an SQL application user and want it to have right to execute xp_cmdshell. I have done:
>1. Give this SQL user the execute permission on xp_cmdshell
>2. Enable SQL server agent non sysadmin job step proxy account by a domain NT user (member of local server user group too)
>I got an error when I login as this user to run master..xp_cmdshell 'dir c:\'
>Msg 50001, Level 1, State 50001
>xpsql.cpp: Error 1326 from LogonUserW on line 620
>Any ideas? What else do I need to do?
>Thanks in advance.



Relevant Pages

  • Re: Error 22039 trying to add SQL 2K to AD
    ... "permissions that matter but rather the permissions of the SQL Server ... What do I lose by not having SQL server registered with AD? ... > of the SQL Server service account. ...
    (microsoft.public.sqlserver.setup)
  • Re: xp_cmdshell failed to execute because current security context
    ... The permissions needed are outlined in the KB that Uri posted. ... When you install SQL Server, you get a bunch of groups, one for each service for that instance. ... So you need to make sure that your service account is a member of this group. ... > ontario, canada ...
    (microsoft.public.sqlserver.server)
  • RE: Upgrade from 2005 to 2008: Invalid Credentials
    ... it seems that this issue was related to NETWORK SERVICE account for SSIS service could not be validated on DC. ... Please first go to your Services pane, double click your SQL Server Integration Services, switch to the Log On tab to check if the service account is NETWORK SERVICE account. ... Install SQL Server 2008 from the Command Prompt ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.setup)
  • Re: SPN Requirement
    ... The service account for SQL Server needs to be a domain ... account to allow Write Public Information rights but I'd ... The SQL Network Interface library could not register the Service Principal ... Name for the SQL Server service. ...
    (microsoft.public.sqlserver.security)
  • Re: Question about "Distribution clean up: distribution" Job
    ... I granted the SQL Server Service Account "Full Control" over ... the Snapshot Folder and the job has been running successfully ever since. ... Then I went into the job step and copied the command it was ...
    (microsoft.public.sqlserver.replication)