February 7, 2008 at 3:21 am
Hello,
I'd like to know how can i give grant to a specific user to execute xp_cmdshell.
This user as one stored procedure that invoques the xp_cmdshell, we cant give him sysadmin privs so:
- Can i give this user one specific grant to execute this extended stored procedure?
- Can i become the owner of that stored procedure and give him privileges to execute the SP?
- Should i use any other option like create the same process with the use of one DTS or anyother option?
Thanks and regards
JMSM;)
February 7, 2008 at 4:33 am
You can enable not sysadmin users to run xp_cmdshell by setting up a proxy account See: http://technet.microsoft.com/en-us/library/ms175046.aspx
Permission wise it will need CONTROL SERVER, so if this is not acceptable, you may want to wrap it into a stored procedure with execute as dbo or a user that has the relevant permissions.
Andras
February 7, 2008 at 4:38 am
Hello,
The point is that i've that account created but i dont know how to use it to permite other users to execute xp_cmdshell
Regards
JMSM
February 7, 2008 at 6:00 am
Make sure user is there is master database and execute following command. Replace login with user_name without quote.
use master
go
grant exec on xp_cmdshell to user_name
go
Hope this is what you are looking for.
---------------------------------------------------
"Thare are only 10 types of people in the world:
Those who understand binary, and those who don't."
February 7, 2008 at 7:24 am
Thanks a lot everybody, the solution was change the password of the user sqlserver_agent_proxy, the password was very strong and SQL Server didn't work fine with this password.
Thanks and regards
JMSM
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply