Groups > microsoft.public.sqlserver.security > #8

Re: proxy account

Newsgroups	microsoft.public.sqlserver.security
Date	2017-01-27 07:01 -0800
References	<0ff101c28b34$f4c13c20$39ef2ecf@TKMSFTNGXA08> <7cba01c28bca$78856d20$3bef2ecf@TKMSFTNGXA10> <ck77tu0o5bi3msfngohkhlqjhucr22tdeb@4ax.com>
Message-ID	<d6c6d5b7-fe17-4ba7-800b-4f2784ad69dd@googlegroups.com> (permalink)
Subject	Re: proxy account
From	Michael <michaeloseni@googlemail.com>

Show all headers | View raw

On Thursday, November 14, 2002 at 1:02:28 PM UTC, Sue Hoegemeier wrote:
> Another option is to create a stored procedure that executes
> the xp_cmdshell command and if the stored procedure is owned
> by dbo and the database is owned by sa, you could grant
> permissions on this stored procedure instead of on
> xp_cmdshell.
> 
> -Sue
> 
> On Thu, 14 Nov 2002 02:42:04 -0800, "Sarma UV"
> <sarmauv@yahoo.com> wrote:
> 
> >Its like any other stored procedure access. Use grant exce 
> >on xp_cmdshell to public / user
> >
> >>-----Original Message-----
> >>How do I grant a user access to the xp_cmdshell proc 
> >>without giving them sysadmin server role permissions?  I 
> >>found documentation telling me about the 
> >>xp_sqlagent_proxy_account proc but no explaination of how 
> >>to use it.  Does anyone know how this proxy account could 
> >>be set up and utilized, or better yet, an alternative way 
> >>of giving a user access to the cmdshell without sysadmin 
> >>permissions?  I'm not even comfortable with a user having 
> >>cmd line access.  How does everyone else handle this?
> >>.
> >>

Please assist

I am getting the below type of error message for all jobs that uses proxy account. These jobs runs fine before with the same proxy account.

Executed as user : Domain\Account.

The process could not be created for step Step Number of job Unique Job ID (reason: A required privilege is not held by the client). The step failed.

I have tried the below resolution with no luck

https://support.microsoft.com/ en-gb/help/911305/sql-server- agent-jobs-may-fail-after-you- change-the-sql-server-agent- service-startup-account-by- using-the-windows-service- control-manager

Back to microsoft.public.sqlserver.security | Previous | Next | Find similar

Thread

Re: proxy account Michael <michaeloseni@googlemail.com> - 2017-01-27 07:01 -0800

csiph-web