Re: dts or xp_cmdshell permissions

No problem. You could have the users execute the package
using the DTS object model. There are a few different
options with that and you could use another application such
as ASP. The following have some examples:

Execute a package with OLE Automation -
http://www.databasejournal.com/features/mssql/article.php/1459181

Execute a package from ASP -
http://www.sqldts.com/default.aspx?207

Execute a package from VB -
http://www.sqldts.com/default.aspx?208

-Sue

On Fri, 7 Oct 2005 16:56:33 -0400, <rvegas@xxxxxxxxxx>
wrote:

>Thanx for your help Sue, still a bit confused will have to read up on this.
>Under enterprise manager >>management>sqlserver agent>job system tab.
>I have "only sysadmins can run active scripting jobs" checked. I dont want
>to change this. Is there another way?
>Sorry for all the stupid questions. just dont want to mess anything up.
>Thanx
>
>"Sue Hoegemeier" <Sue_H@xxxxxxxxxxxxx> wrote in message
>news:55jlj1p4m2s30gcolq6i9ok7gqcs16vjjj@xxxxxxxxxx
>> First, your missing the rights for the service account. The
>> permissions are outlined in the following article but if you
>> set the service accounts through Enterprise Manager, the
>> rights and permissions are handled for you:
>> HOW TO: Change the SQL Server or SQL Server Agent Service
>> Account Without Using SQL Enterprise Manager in SQL Server
>> 2000
>> http://support.microsoft.com/?id=283811
>> You can use the Local Security Policy snap in to view the
>> permissions. From the run command from the start button,
>> type in secpol.msc
>> If accounts other than sysadmin accounts or the service
>> accounts are going to be used to execute xp_cmdshell, you
>> need to setup a proxy account. You can use
>> xp_sqlagent_proxy_account
>> You can find more information in books online under
>> xp_sqlagent_proxy_account and xp_cmdshell.
>>
>> -Sue
>>
>> On Wed, 28 Sep 2005 12:18:24 -0400, <rvegas@xxxxxxxxxx>
>> wrote:
>>
>>>Yeah i read that somewhere, but i dont know how to give it the
>>>permissions.
>>>Where do i do that ? act as part of OS and logon as batch are windows
>>>permissions. I dont have a proxy account for SQL under the local users or
>>>domain users. What am i missing here?
>>>Thank for helping
>>>
>>>"Sue Hoegemeier" <Sue_H@xxxxxxxxxxxxx> wrote in message
>>>news:feijj1dvrbpvrjepce3jrvqbkj2pdi6l6e@xxxxxxxxxx
>>>> The error 1314 you are getting is:
>>>> A required privilege is not held by the client.
>>>>
>>>> Could be that your SQL service account doesn't have the
>>>> correct rights to allow it to change security context to the
>>>> proxy account. The SQL service account needs Act as part of
>>>> OS, Increase Quotas, replace process level token and Login
>>>> as batch job.
>>>>
>>>> -Sue
>>>>
>>>> On Wed, 21 Sep 2005 16:15:04 -0400, "robert" <rob@xxxxxx>
>>>> wrote:
>>>>
>>>>>How do i give a user permissions to execute XP_CMDSHELL or a DTS
>>>>>package?
>>>>>Without compromising the systems security.
>>>>>
>>>>>Basically what im trying to do is use an asp page on another domain to
>>>>>access mssql and create a database. Everything works fine except that i
>>>>>cannot create a folder on the server.
>>>>>I need to first create a folder by passing the domain name to
>>>>>xp_cmdshell
>>>>>on
>>>>>the local drive. Then creating the database.
>>>>>The account accessing the mssql server is dbm.something.com which is in
>>>>>the
>>>>>master database. This sends arguments to a stores procedure that creates
>>>>>the
>>>>>database. I added a line to the stored procedure to run xp_cmdshell and
>>>>>create a database. Once it gets to this line it gives me an error
>>>>>xpsql.c:Error 1314 from CreateProcessAsUser on line: 432.
>>>>>Please help me
>>>>>Thank you
>>>>>
>>>>
>>>
>>
>

.