Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

xp_cmdshell permissions problem

Status
Not open for further replies.

katbear

Programmer
Mar 14, 2007
270
US
Hi,

RE: SQL Server 2005

Is anyone familiar with this error message?

The xp_cmdshell proxy account information cannot be retrieved or is invalid. Verify that the '##xp_cmdshell_proxy_account##' credential exists and contains valid information.

Msg 15153, Level 16, State 1, Procedure xp_cmdshell, Line 1

A non-sysadmin user received this error. Running sp_xp_cmdshell_proxy_account solved the problem.

Does this mean that ALL non-sysadmin users must have proxy accounts in order to use xp_cmdshell? Or is there something missing here?

Thanks

 
All users who are not sysadmins use a single proxy account to gain access to xp_cmdshell. If it's working for one, it should work for all.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)
[noevil]
 
Hi MrDenny,

Can you please explain how I could set up a single proxy account for all users? I'm confused on this.

Thanks
 
When you ran sp_xp_cmdshell_proxy_account you should have specified a Windows account and password. This setup the proxy account with what ever account you specified.

When setting up a proxy account you should NOT use the SQL Account or any other admin account as doing so will give every user admin access when using xp_cmdshell.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)
[noevil]
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top