Re: Restricting CmdExec Rights to Sysadmin

From: Chip Andrews (chip@sqlsecurity.com)
Date: 02/20/03

  • Next message: Levinson, Karl: "RE: [despammed] Defeating password cracking"
    From: "Chip Andrews" <chip@sqlsecurity.com>
    To: <focus-ms@securityfocus.com>
    Date: Wed, 19 Feb 2003 18:56:57 -0500
    
    

    Frank,

    Try

    EXECUTE msdb.dbo.sp_set_sqlagent_properties @sysadmin_only = 1

    Chip Andrews
    www.sqlsecurity.com

    ----- Original Message -----
    From: "Frank Heyne" <fh@rcs.urz.tu-dresden.de>
    To: <focus-ms@securityfocus.com>
    Sent: Wednesday, February 19, 2003 3:25 AM
    Subject: Restricting CmdExec Rights to Sysadmin

    > Hello,
    >
    > MBSA does say it is a problem on a machine which has no SQL Server,
    > but MSDE installed: "To secure your database, you should only allow
    > members of the sysadmin role to execute CmdExec and ActiveScripting
    > job steps."
    >
    > Does anyone have any idea how to correct this problem?
    > MBSA only has a solution for MS SQL Server, but the MSDE does not
    > have an Enterprise Manager, and therefore the solution does not work.
    >
    > I did already google for "Restricting CmdExec Rights to Sysadmin",
    > but got only 4 hits, none of them for the MSDE.
    >
    > Frank Heyne
    >



    Relevant Pages

    • AW: Restricting CmdExec Rights to Sysadmin
      ... Restricting CmdExec Rights to Sysadmin ... MBSA does say it is a problem on a machine which has no SQL Server, ... MBSA only has a solution for MS SQL Server, but the MSDE does not ... I did already google for "Restricting CmdExec Rights to Sysadmin", ...
      (Focus-Microsoft)
    • Restricting CmdExec Rights to Sysadmin
      ... MBSA does say it is a problem on a machine which has no SQL Server, ... MBSA only has a solution for MS SQL Server, but the MSDE does not ... I did already google for "Restricting CmdExec Rights to Sysadmin", ...
      (Focus-Microsoft)