SQL Server Agent Proxy Account / XP_CMDSHELL

From: John - PDX (JohnPDX_at_discussions.microsoft.com)
Date: 05/26/05

  • Next message: jason: "service pack 4 security enhancements" 
    Date: Thu, 26 May 2005 11:48:01 -0700

    Thanks in advance.

    I am trying to run the xp_cmdshell and am calling it with osql from a batch
    file for a user. I have set the sql server agent proxy account with an
    account that is both a domain admin & sql sysadmin (in our dev lab only) and
    still I get EXECUTE permission denied.

    I can make the user a sysadmin for test purposes only and all works fine. I
    can also go directly to the xp_cmdshell permissions, give the user execute
    permissions and all works OK there as well.

    In reasearching this issue I should be able to set the sql server agent
    proxy account and then my user should be able to run the batch file that runs
    the osql that calls the sp that runs the xp_cmdshell - correct? 

    -- 
Thanks,
John
  • Next message: jason: "service pack 4 security enhancements"

    Relevant Pages

    • Re: Default Permissions
      ... If you use Enterprise Manager to choose the accountused to start SQL ... Server and SQL Server Agent then the permissions will all be granted to ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
      (microsoft.public.sqlserver.security)
    • Snapshot Agent account rights
      ... Using SQL Server Agent as the Snapshot Agent account is not a recommended ... If a domain account is used, what rights and ... permissions should it be granted? ...
      (microsoft.public.sqlserver.replication)