Home Forums SQL Server 2012 SQL 2012 - General Error-CreateProcessAsUser on xp_cmdshell RE: Error-CreateProcessAsUser on xp_cmdshell

  • April 1, 2014 at 3:55 pm

    #1702267

    Satheesh E.P. (4/1/2014)

    XP_cmdshell is working fine in our environment with a non-sysadmin account.

    I don't know about your specific problem but I have to tell you that giving a non-sysadmin account privs to execute xp_CmdShell directly is one of the worst things for security that you could ever do. You should have the user only have the privs to run a protected stored procedure that runs xp_CmdShell in a safe and limited manner.

    It's for things like this that xp_CmdShell has gotten such a bad name. 😉

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)