Re: something strange:|

Why do you say the information is contradictory? Perhaps the double
negative is confusing. Restricting CmdExec to sysadmin role members is the
same thing as not allowing non-sysadmin role members to use CmdExec.

In any case, you should avoid allowing non-sysadmin role members to use
CmdExec (creating proxy account) unless you have a specific reason to do so.

--
Hope this helps.

Dan Guzman
SQL Server MVP

<Eng.Rana@xxxxxxxxx> wrote in message
news:1147859895.957253.15840@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
i found something really strange and i want to know ur opinion in such
an issue,
i found that CmdExec should not be granted to users who r not member of
the sysadmin role.
while in Microsoft Baseline Security Analyzer (MBSA) 2.0 i found that
its recommended that CmdExec rights are restricted to Sysadmin only.
which completely contradicts!!!!!!!!!!!!!!!!
so which shall i do?????????????????????????



.