Post reply

Users with non-sysadmin privileges execute "xp_cmdshell"

  • April 12, 2004 at 5:16 am

    #108002

    Dear Experts,

    As xp_cmdshell is run within sysadmin privileges, is not possible to execute by non-sysadmin users, except uncheck the option "Only SysAdmin Users can execute CmdExec" from SQL Agent's properties and supplied it with ID and password. How to set the proxy account? How to get the ID and password from the server or SQL Server? How to know what domain is now running?

    Is there any other methods or any similar store procedures that can solve this problem?



    Regards,
    kokyan

  • April 13, 2004 at 6:10 am

    #502524

    You can use xp_sqlagent_proxy_account to set the account that xp_cmdshell will execute under. You can use this procedure to get or set the account information. When setting the account information, the parameters are the word 'set', the domain name, user name, and password for the account. The parameters must be provided in order. The SQL server must be able to connect to the domain/machine specified and validate the account information.  Also the SQL instance mustbe running under a Windows administrator account to be able to read or set the proxy account.

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply