Re: "Access denied" with xp_cmdshell (!)


"Vycka" <vyciunas@xxxxxx> wrote in message
news:uMKcLj0xGHA.4732@xxxxxxxxxxxxxxxxxxxxxxx
But problem is that I have tried to give for that account full control
seperately. I mean I added the permission entry "DOMAIN\SQLUser - Full
control" to NTFS security and also to sharing security settings.

Still waiting for help...

Try running the SET command under xp_cmdshell to dump the envioronment of
the impersonation context that XP is using (to verify that it is the context
you're expecting.)

Also, is the Access Denied error being returned by the command shell, by
CACLS or by SQL Server?


-Mark




Vycka

"Laurentiu Cristofor [MSFT]" <laur@xxxxxxxxxx> wrote in message
news:%233fybxwxGHA.3492@xxxxxxxxxxxxxxxxxxxxxxx
If you recently made the domain account an administrator, you may need to
restart Sql Server for those permissions to take effect. A change of
permissions for an account won't affect processes already running as that
account.

Thanks

--
Laurentiu Cristofor [MSFT]
Software Design Engineer
SQL Server Engine
http://blogs.msdn.com/lcris/

This posting is provided "AS IS" with no warranties, and confers no
rights.

"Vycka" <vyciunas@xxxxxx> wrote in message
news:ejaW$gsxGHA.2168@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I'm running this command on my SQL server and I'm getting an error
'Access
denied.'

EXEC master.dbo.xp_cmdshell 'cacls "\\PC1\Temp\3.bmp" \E \G
DOMAIN\User:R'


- My sql server service is running on a domain account and that account
is
and administrator in sql server computer and in computer PC1.
- Directory "Temp" Sharing rights are "everyone - full control".
- File 3.bmp permissions are that all admins get full control.


This command works fine only when I set file permissions to "everyone -
full
control".


SQL server version - MS SQL 2005 Standard edition x64

Thanks for help

Vyckla









.

Relevant Pages

  • Consider Windows XP File Security and Group Policies
    ... If you are running Windows XP and are using the NTFS file system, ... Account from being able to purge its history footprint files. ... Changing Folder permissions to Read-Execute instead of Full ... you globally apply Full Control for the Administrators group and the SYSTEM ...
    (microsoft.public.windowsxp.general)
  • Re: Execute Persmission denied on object sp_OACreate
    ... If so what access and permissions. ... The account is a windows account. ... One method to test permissions is to log in to your SQL Server box using the ... >>> SA account password and gaining access to the database. ...
    (microsoft.public.sqlserver.security)
  • Re: Specifying a logon account for SQL Server 2005 services
    ... As I mentioned using a Windows domain account with no permissions is the ... configured only for very specific server and memory configurations. ... account to use while installing SQL Server, will SQL Server give this account ...
    (microsoft.public.sqlserver.security)
  • Re: simple security question (need refresher)
    ... If IIS is configured for anonymous access and you connect to SQL Server ... using Windows authentication, the IIS anonymous account ... this account or roles that this account is a member of. ... Permissions are required only on objects directly accessed by the ...
    (microsoft.public.sqlserver.security)
  • Re: "Access denied" with xp_cmdshell (!)
    ... But problem is that I have tried to give for that account full control ... restart Sql Server for those permissions to take effect. ...
    (microsoft.public.sqlserver.security)
Quantcast