Re: adding windows user via sp_cmdshell

From: Peter (anonymous_at_discussions.microsoft.com)
Date: 07/23/04 

Date: Fri, 23 Jul 2004 07:29:26 -0700

Hi Tom

As Hari said it is possible, but difficult. The problem
here is its taking the userid of SQL Server instance that
the runs the xp_cmdshell and attempting to create users.
If that userid doesn't have the Server (not SQL)
permission to do its going to crash and burn.

>-----Original Message-----
>Hello Hari,
>
>I have tried it, but it did not work for me, I got:
>The request will be processedat DC ....
>System error 5 has occurred
>Access denied.
>
>I got this regardless if I'm using SA account to open
Query Analizer or windows auth... where am member of
domain admin. any idea...
>
>"Hari Prasad" wrote:
>
>> Hi,
>>
>> Yes. See the OS commands NET USER and NET GROUP in OS
Help. You can use this
>> command from Query Anayzer using XP_CMDSHELL.
>>
>> Sample
>>
>>
>> Master..XP_cmdshell 'net user Fin_user
password /DOMAIN /ADD'
>> go
>> Master..XP_cmdshell 'net group Finance /DOMAIN /ADD'
>> go
>>
>>
>> For more details of command execute the below from
command prompt
>>
>> net user ?
>>
>> net group ?
>>
>> Thanks
>> Hari
>> MCDBA
>>
>>
>> "TOM P." <TOMP@discussions.microsoft.com> wrote in
message
>> news:E8D38151-CF4C-4EF9-A713-
617E25BA2AEE@microsoft.com...
>> > assuming SQL server nt service is started under
domain user with right to
>> create windows user in domain, is there a way to
execute sp_ in QA that
>> allow mw to create domain user, set password and add
user to group in
>> domain? if so can anyone provide this statment.
>> >
>> > Tom,
>>
>>
>>
>.
>