Grant.... with admin option..... (xp_cmdshell)

Question

Grant.... with admin option..... (xp_cmdshell)

JMSM

SSCertifiable

Points: 5440
More actions
February 7, 2008 at 3:21 am

#122007

Hello,
I'd like to know how can i give grant to a specific user to execute xp_cmdshell.
This user as one stored procedure that invoques the xp_cmdshell, we cant give him sysadmin privs so:
- Can i give this user one specific grant to execute this extended stored procedure?
- Can i become the owner of that stored procedure and give him privileges to execute the SP?
- Should i use any other option like create the same process with the use of one DTS or anyother option?
Thanks and regards
JMSM;)

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

Andras Belokosztolszki SSC-Insane Points: 21971 More actions · Answer 1

You can enable not sysadmin users to run xp_cmdshell by setting up a proxy account See: http://technet.microsoft.com/en-us/library/ms175046.aspx

Permission wise it will need CONTROL SERVER, so if this is not acceptable, you may want to wrap it into a stored procedure with execute as dbo or a user that has the relevant permissions.

Andras

Andras Belokosztolszki, MCPD, PhD
GoldenGate Software

JMSM SSCertifiable Points: 5440 More actions · Answer 2

Hello,

The point is that i've that account created but i dont know how to use it to permite other users to execute xp_cmdshell

Regards

JMSM

free_mascot One Orange Chip Points: 27169 More actions · Answer 3

Make sure user is there is master database and execute following command. Replace login with user_name without quote.

use master

go

grant exec on xp_cmdshell to user_name

go

Hope this is what you are looking for.

---------------------------------------------------
"Thare are only 10 types of people in the world:
Those who understand binary, and those who don't."

JMSM SSCertifiable Points: 5440 More actions · Answer 4

Thanks a lot everybody, the solution was change the password of the user sqlserver_agent_proxy, the password was very strong and SQL Server didn't work fine with this password.

Thanks and regards

JMSM