Wednesday, March 7, 2012

How can I grant user run cmdexec

I have a DTS task that needs to run cmdexec, how can I
grant the user have the rights to run this DTS but not
giving him Admin rights?Hi,
First you can give grant execute on xp_cmdshell (gtrant execute on
xp_cmdshell to user) to the user in master database.
If they are not a member of the sysadmin role then they execute it under the
prefix of the SQL Agent Proxy Account.
sysadmin users would execute it as the account under which MSSQL Server
service starts.
How to set the proxy account:
1. Open enterprise manager and select management options
2. Right click abouve the sql Agent and select properties
3. Select the "job system" option
4. Set the "Non sysadmin job step proxy account
5. There you have give the valid OS level user with previlage.
http://support.microsoft.com/defaul...microsoft.com:
80/support/kb/articles/Q264/1/55.ASP&NoWebContent=1
Thanks
Hari
MCDBA
"Cora" <anonymous@.discussions.microsoft.com> wrote in message
news:3a2801c47f53$0d7a2ba0$a301280a@.phx.gbl...
> I have a DTS task that needs to run cmdexec, how can I
> grant the user have the rights to run this DTS but not
> giving him Admin rights?|||I tried, but got below error:
Unable to set the SQL Agent proxy account because of the reason listed
below.
'Error executing extended stored procedure: Specified user can not login'
I tried to add an account that already have SQL Admin. rights and I have
explicitly added the account on master\xp_cmdexec xsp.
Please advice.
"Hari Prasad" <hari_prasad_k@.hotmail.com> wrote in message
news:ORKb7Y1fEHA.596@.TK2MSFTNGP11.phx.gbl...
> Hi,
> First you can give grant execute on xp_cmdshell (gtrant execute on
> xp_cmdshell to user) to the user in master database.
> If they are not a member of the sysadmin role then they execute it under
the
> prefix of the SQL Agent Proxy Account.
> sysadmin users would execute it as the account under which MSSQL Server
> service starts.
> How to set the proxy account:
> 1. Open enterprise manager and select management options
> 2. Right click abouve the sql Agent and select properties
> 3. Select the "job system" option
> 4. Set the "Non sysadmin job step proxy account
> 5. There you have give the valid OS level user with previlage.
>
>
http://support.microsoft.com/defaul...microsoft.com:
> 80/support/kb/articles/Q264/1/55.ASP&NoWebContent=1
>
> Thanks
> Hari
> MCDBA
> "Cora" <anonymous@.discussions.microsoft.com> wrote in message
> news:3a2801c47f53$0d7a2ba0$a301280a@.phx.gbl...
>|||This can happen when the startup account for SQL Server
doesn't have the proper permissions. If you change the
accounts through Enterprise Manager, the permissions and
rights are taken care of for you. If not, you need to go
through and verify the correct rights and permission. You
could reset the service accounts through Enterprise Manager
or go through the following article to check the permissions
for the account:
HOW TO: Change the SQL Server or SQL Server Agent Service
Account Without Using SQL Enterprise Manager in SQL Server
2000
http://support.microsoft.com/?id=283811
-Sue
On Thu, 19 Aug 2004 10:49:52 +0800, "Nobody"
<nobody@.nospam.com> wrote:

>I tried, but got below error:
>Unable to set the SQL Agent proxy account because of the reason listed
>below.
>'Error executing extended stored procedure: Specified user can not login'
>I tried to add an account that already have SQL Admin. rights and I have
>explicitly added the account on master\xp_cmdexec xsp.
>Please advice.
>
>
>"Hari Prasad" <hari_prasad_k@.hotmail.com> wrote in message
>news:ORKb7Y1fEHA.596@.TK2MSFTNGP11.phx.gbl...
>the
>[url]http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:[/url
]
>

No comments:

Post a Comment