Post reply

Error-CreateProcessAsUser on xp_cmdshell

  • April 1, 2014 at 8:41 am

    #396514

    Hi All,

    XP_cmdshell is working fine in our environment with a non-sysadmin account. But recently the server got restarted and the xp_cmdshell works under a sys-admin login but throws the below error, if I am trying to execute with non-sysadmin account. No setting changes on user or server level is done while restarting the server.

    An error occurred during the execution of xp_cmdshell. A call to 'CreateProcessAsUser' failed with error code: '1314'.

    I have dropped the proxy account and recreated it again. But no luck.

    ---------------------------------------------------
    Thanks,
    Satheesh.

  • April 1, 2014 at 3:55 pm

    #1702267

    Satheesh E.P. (4/1/2014)

    XP_cmdshell is working fine in our environment with a non-sysadmin account.

    I don't know about your specific problem but I have to tell you that giving a non-sysadmin account privs to execute xp_CmdShell directly is one of the worst things for security that you could ever do. You should have the user only have the privs to run a protected stored procedure that runs xp_CmdShell in a safe and limited manner.

    It's for things like this that xp_CmdShell has gotten such a bad name. 😉

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply