Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > microsoft.public.sqlserver.security > #7

Re: Proxy account

X-Received by 10.107.175.152 with SMTP id p24mr2430029ioo.29.1485528820081; Fri, 27 Jan 2017 06:53:40 -0800 (PST)
X-Received by 10.157.45.102 with SMTP id v93mr619696ota.3.1485528820025; Fri, 27 Jan 2017 06:53:40 -0800 (PST)
Path csiph.com!weretis.net!feeder6.news.weretis.net!news.glorb.com!r185no662977ita.0!news-out.google.com!15ni14183itm.0!nntp.google.com!r185no662974ita.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
Newsgroups microsoft.public.sqlserver.security
Date Fri, 27 Jan 2017 06:53:39 -0800 (PST)
In-Reply-To <el9e8YXeDHA.988@TK2MSFTNGP10.phx.gbl>
Complaints-To groups-abuse@google.com
Injection-Info glegroupsg2000goo.googlegroups.com; posting-host=80.168.113.132; posting-account=D4DUxwoAAAAHbTvwwsdyyVI-O92JzN3p
NNTP-Posting-Host 80.168.113.132
References <erL3MS8dDHA.1728@TK2MSFTNGP09.phx.gbl> <el9e8YXeDHA.988@TK2MSFTNGP10.phx.gbl>
User-Agent G2/1.0
MIME-Version 1.0
Message-ID <d40cb31c-94dd-46af-a529-8a1e2b6366e9@googlegroups.com> (permalink)
Subject Re: Proxy account
From Michael <michaeloseni@googlemail.com>
Injection-Date Fri, 27 Jan 2017 14:53:40 +0000
Content-Type text/plain; charset=UTF-8
Content-Transfer-Encoding quoted-printable
Xref csiph.com microsoft.public.sqlserver.security:7

Show key headers only | View raw


On Friday, September 12, 2003 at 7:43:28 PM UTC+1, Gert E.R. Drapers wrote:
> Most of the times this is caused due to insufficient priviliges of the SQL
> Server service account used.
> Go to SQL EM, Server Properties, Security tab, set the service account to
> LocalSystem, restart SQL Server.
> Repeat the same process to set it back to the account you want to use.
> 
> Try again to set the proxy account.
> 
> if that does not work, use the following alternative way to execute the XP
> 
> EXEC master.dbo.xp_sqlagent_proxy_account N'SET',
>              N'mydomain', -- agent_domain_name
>              N'ntaccount', -- agent_username
>              N'123password'
>              N'machine name', -- name of the machine or note your are
> running on
>              N'Administrator', -- local machine administrator account
>              N'123AdminPassword'
> 
> GertD@SQLDev.Net
> 
> Please reply only to the newsgroups.
> This posting is provided "AS IS" with no warranties, and confers no rights.
> You assume all risk for your use.
> Copyright © SQLDev.Net 1991-2003 All rights reserved.
> 
> "ilovesql" <ilovesql@hotmail.com> wrote in message
> news:erL3MS8dDHA.1728@TK2MSFTNGP09.phx.gbl...
> > I want to setup proxy account so that developers can run xp_cmdshell as
> > follows
> >
> > EXEC master.dbo.xp_sqlagent_proxy_account N'SET',
> >              N'mydomain', -- agent_domain_name
> >              N'ntaccount', -- agent_username
> >              N'123password'
> >
> > I get a message saying
> > "Error executing extended stored procedure: Specified user can not login"
> >
> > If I use
> > EXEC master.dbo.xp_sqlagent_proxy_account 'GET'
> > I get nothing.
> >
> > I tried to do this from Enterprise MAnager also but same error.
> >
> >

Please assist 

I am getting the below type of error message for all jobs that uses proxy account. These jobs runs fine before with proxy account. 

Executed as user : Domain\Account. 

The process could not be created for step Step Number of job Unique Job ID (reason: A required privilege is not held by the client). The step failed. 

I have tried the below resolution with no luck 

https://support.microsoft.com/en-gb/help/911305/sql-server-agent-jobs-may-fail-after-you-change-the-sql-server-agent-service-startup-account-by-using-the-windows-service-control-manager

Back to microsoft.public.sqlserver.security | Previous | Next | Find similar


Thread

Re: Proxy account Michael <michaeloseni@googlemail.com> - 2017-01-27 06:53 -0800

csiph-web