Selecting a proxy account 1

[thamms]

Hi,

I need to set up a proxy account to allow users to run xp_cmdshell on a linked server.

My question is, is there a preferred window account to use for the proxy?

Thanks

 

[mrdenny]

Yes, setup a windows account specifically for this purpose, and give it the least amount of rights possible.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog

 

[thamms]

Hi Mr. Denny,

What should the minimum permissions be if all I want to do is run xp_cmdshell? That's what I'm having trouble determining.

Thanks

 

[mrdenny]

The proxy account doesn't need any rights within the database. I beleive that it doesn't need many rights on the SQL Server's OS either. It's needs to be able to be impersonated, and it needs rights to do what ever you want the users to be able to do (copy a file, move a file, delete a file, etc).

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog