xp_cmdshell permissions problem

[katbear]

Hi,

RE: SQL Server 2005

Is anyone familiar with this error message?

The xp_cmdshell proxy account information cannot be retrieved or is invalid. Verify that the '##xp_cmdshell_proxy_account##' credential exists and contains valid information.

Msg 15153, Level 16, State 1, Procedure xp_cmdshell, Line 1

A non-sysadmin user received this error. Running sp_xp_cmdshell_proxy_account solved the problem.

Does this mean that ALL non-sysadmin users must have proxy accounts in order to use xp_cmdshell? Or is there something missing here?

Thanks

 

[mrdenny]

All users who are not sysadmins use a single proxy account to gain access to xp_cmdshell. If it's working for one, it should work for all.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[katbear]

Hi MrDenny,

Can you please explain how I could set up a single proxy account for all users? I'm confused on this.

Thanks

 

[mrdenny]

When you ran sp_xp_cmdshell_proxy_account you should have specified a Windows account and password. This setup the proxy account with what ever account you specified.

When setting up a proxy account you should NOT use the SQL Account or any other admin account as doing so will give every user admin access when using xp_cmdshell.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com