Re: How can I grant user run cmdexec

From: Nobody (nobody_at_nospam.com)
Date: 08/19/04 

Date: Thu, 19 Aug 2004 10:49:52 +0800

I tried, but got below error:
Unable to set the SQL Agent proxy account because of the reason listed
below.
'Error executing extended stored procedure: Specified user can not login'

I tried to add an account that already have SQL Admin. rights and I have
explicitly added the account on master\xp_cmdexec xsp.

Please advice.

"Hari Prasad" <hari_prasad_k@hotmail.com> wrote in message
news:ORKb7Y1fEHA.596@TK2MSFTNGP11.phx.gbl...
> Hi,
>
> First you can give grant execute on xp_cmdshell (gtrant execute on
> xp_cmdshell to user) to the user in master database.
>
> If they are not a member of the sysadmin role then they execute it under
the
> prefix of the SQL Agent Proxy Account.
> sysadmin users would execute it as the account under which MSSQL Server
> service starts.
>
> How to set the proxy account:
>
> 1. Open enterprise manager and select management options
> 2. Right click abouve the sql Agent and select properties
> 3. Select the "job system" option
> 4. Set the "Non sysadmin job step proxy account
> 5. There you have give the valid OS level user with previlage.
>
>
>
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:
> 80/support/kb/articles/Q264/1/55.ASP&NoWebContent=1
>
>
> Thanks
> Hari
> MCDBA
>
> "Cora" <anonymous@discussions.microsoft.com> wrote in message
> news:3a2801c47f53$0d7a2ba0$a301280a@phx.gbl...
> > I have a DTS task that needs to run cmdexec, how can I
> > grant the user have the rights to run this DTS but not
> > giving him Admin rights?
>
>

Relevant Pages

  • Re: SQL Server Agent Proxy Account / XP_CMDSHELL
    ... The proxy account is unrelated to SQL Server object permissions. ... must have xp_cmdshell execute permissions when xp_cmdshell executed ... execute permissions on xp_cmdshell. ...
    (microsoft.public.sqlserver.security)
  • Re: xp_cmdshell default path (system32) problem
    ... I've used the proxy account several times before. ... SQL script that contains the xp_cmdShell is executed while logged in as 'sa' ... - specify the full path in the del command ... I'm use xp_cmdShell to execute "erase" command like ...
    (microsoft.public.sqlserver.programming)
  • Re: xp_cmdshell default path (system32) problem
    ... I mentioned in one of my earlier posts on this thread that the proxy account will not be used by sysadmins. ... in my experience if the SQL script that contains the xp_cmdShell is executed while logged in as 'sa' then the proxy account is not used. ... I believe I had the samething happen if the sql was execute from SQL agent when SQL agent is running under the system service account. ... technically if you specify the whole path with the del command you dont if need the if exist part, ...
    (microsoft.public.sqlserver.programming)
  • Re: execute a stored job through MS ACCESS 2000
    ... If the user is not a sysadmin then the user needs to own the ... job to execute sp_start_job. ... configured the proxy account, the job will fail. ... The proxy account is used for the security context when jobs ...
    (microsoft.public.sqlserver.security)
  • RE: 64bit SSIS package calling 32bit SSIS package
    ... Used filemon to see what was going on and discovered that my proxy account ... was trying to use the temp folder that was owned by the account I run sql ... Execute the control package from the command line on the server as my proxy ... However if I schedule the offending 32bit package on its own from SQL Agent ...
    (microsoft.public.sqlserver.dts)