Grant.... with admin option..... (xp_cmdshell)

  • Hello,

    I'd like to know how can i give grant to a specific user to execute xp_cmdshell.

    This user as one stored procedure that invoques the xp_cmdshell, we cant give him sysadmin privs so:

    - Can i give this user one specific grant to execute this extended stored procedure?

    - Can i become the owner of that stored procedure and give him privileges to execute the SP?

    - Should i use any other option like create the same process with the use of one DTS or anyother option?

    Thanks and regards

    JMSM;)

  • You can enable not sysadmin users to run xp_cmdshell by setting up a proxy account See: http://technet.microsoft.com/en-us/library/ms175046.aspx

    Permission wise it will need CONTROL SERVER, so if this is not acceptable, you may want to wrap it into a stored procedure with execute as dbo or a user that has the relevant permissions.

    Andras


    Andras Belokosztolszki, MCPD, PhD
    GoldenGate Software

  • Hello,

    The point is that i've that account created but i dont know how to use it to permite other users to execute xp_cmdshell

    Regards

    JMSM

  • Make sure user is there is master database and execute following command. Replace login with user_name without quote.

    use master

    go

    grant exec on xp_cmdshell to user_name

    go

    Hope this is what you are looking for.

    ---------------------------------------------------
    "Thare are only 10 types of people in the world:
    Those who understand binary, and those who don't."

  • Thanks a lot everybody, the solution was change the password of the user sqlserver_agent_proxy, the password was very strong and SQL Server didn't work fine with this password.

    Thanks and regards

    JMSM

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply