Re: adding windows user via sp_cmdshell

From: Peter (anonymous_at_discussions.microsoft.com)
Date: 07/23/04

  • Next message: Peter: "sql agent job owner best practice" 
    Date: Fri, 23 Jul 2004 09:03:04 -0700

    Agreed.

    >-----Original Message-----
    >Hi,
    >
    >I agree with you peter. To do this you might need to
    start the MSSQL server
    >service using
    >a Domain Administrator account. I will not suggest you
    this.
    >
    >I will not recommend you to create users / Groups from
    Query Analyzer.
    >
    >Thanks
    >Hari
    >MCDBA
    >
    >
    >"Peter" <anonymous@discussions.microsoft.com> wrote in
    message
    >news:2dc001c470c1$74fea120$a301280a@phx.gbl...
    >> Hi Tom
    >>
    >> As Hari said it is possible, but difficult. The problem
    >> here is its taking the userid of SQL Server instance
    that
    >> the runs the xp_cmdshell and attempting to create users.
    >> If that userid doesn't have the Server (not SQL)
    >> permission to do its going to crash and burn.
    >>
    >>
    >> >-----Original Message-----
    >> >Hello Hari,
    >> >
    >> >I have tried it, but it did not work for me, I got:
    >> >The request will be processedat DC ....
    >> >System error 5 has occurred
    >> >Access denied.
    >> >
    >> >I got this regardless if I'm using SA account to open
    >> Query Analizer or windows auth... where am member of
    >> domain admin. any idea...
    >> >
    >> >"Hari Prasad" wrote:
    >> >
    >> >> Hi,
    >> >>
    >> >> Yes. See the OS commands NET USER and NET GROUP in OS
    >> Help. You can use this
    >> >> command from Query Anayzer using XP_CMDSHELL.
    >> >>
    >> >> Sample
    >> >>
    >> >>
    >> >> Master..XP_cmdshell 'net user Fin_user
    >> password /DOMAIN /ADD'
    >> >> go
    >> >> Master..XP_cmdshell 'net group Finance /DOMAIN /ADD'
    >> >> go
    >> >>
    >> >>
    >> >> For more details of command execute the below from
    >> command prompt
    >> >>
    >> >> net user ?
    >> >>
    >> >> net group ?
    >> >>
    >> >> Thanks
    >> >> Hari
    >> >> MCDBA
    >> >>
    >> >>
    >> >> "TOM P." <TOMP@discussions.microsoft.com> wrote in
    >> message
    >> >> news:E8D38151-CF4C-4EF9-A713-
    >> 617E25BA2AEE@microsoft.com...
    >> >> > assuming SQL server nt service is started under
    >> domain user with right to
    >> >> create windows user in domain, is there a way to
    >> execute sp_ in QA that
    >> >> allow mw to create domain user, set password and add
    >> user to group in
    >> >> domain? if so can anyone provide this statment.
    >> >> >
    >> >> > Tom,
    >> >>
    >> >>
    >> >>
    >> >.
    >> >
    >
    >
    >.
    >

  • Next message: Peter: "sql agent job owner best practice"

    Relevant Pages

    • Re: adding windows user via sp_cmdshell
      ... To do this you might need to start the MSSQL server ... a Domain Administrator account. ... > If that userid doesn't have the Server ...
      (microsoft.public.sqlserver.security)
    • Re: schedule job - login in dynamic sql
      ... If the user created the stored proc without ... You have a userid as the login on the server. ... usually the Agent userid is a member of the sysadmin, or at least of dbo), ...
      (microsoft.public.sqlserver.programming)
    • Re: WSS: Finding My Sites through SQL
      ... sites on a diferent server than the WSS server. ... foreach (XmlNode node in AllSites) ... and I came up with this SQL: ... Select @userId = tp_ID from UserInfo where tp_login like 'DOMAIN ...
      (microsoft.public.sharepoint.windowsservices)
    • WSS: Finding My Sites through SQL
      ... sites on a diferent server than the WSS server. ... foreach (XmlNode node in AllSites) ... and I came up with this SQL: ... Select @userId = tp_ID from UserInfo where tp_login like 'DOMAIN ...
      (microsoft.public.sharepoint.windowsservices)
    • Re: login info from ie screen
      ... windows userid from the client machine, but it displays another userid that ... As if there is miscommunication between client and windows 2003 server. ... >> intranet userid that is different than her actual windows userid. ...
      (microsoft.public.frontpage.client)