Local Admin

28 Nov 2007 1:35 AM

AHartman

If you start your SQL services with local admin and you have a process that
uses xp_cmdshell to get files based upon date on a remote server. Can you do
that?

What permission will I need to apply on the remote server folders or from
within the Sql2005 box issuing the xp_cmdshell request.

Thanks.

28 Nov 2007 1:59 AM

Ben Nevarez

First, you need to enable xp_cmdshell by using sp_configure (it is disabled
by default for security reasons).

Second, you need to give permissions on the remote shared folder to the
account used to run the SQL Server service. Usually this should be a Windows
domain account so it can access resources on the network.

Hope this helps,

Ben Nevarez
Senior Database Administrator
AIG SunAmerica

Show quoteHide quote

"AHartman" wrote:

> If you start your SQL services with local admin and you have a process that
> uses xp_cmdshell to get files based upon date on a remote server. Can you do
> that?
>
> What permission will I need to apply on the remote server folders or from
> within the Sql2005 box issuing the xp_cmdshell request.
>
>
> Thanks.
>
>

28 Nov 2007 2:01 AM

TheSQLGuru

No. Local admin won't have the required permissions for remote system
access. You will need to use a domain level account for the sql services
logins and give that account appropriate access.

--
Kevin G. Boles
TheSQLGuru
Indicium Resources, Inc.

Show quoteHide quote

"AHartman" <Hoosbr***@Kconline.com> wrote in message
news:0PmdnSu0MdRCWNHanZ2dnUVZ_gGdnZ2d@kconline.com...
> If you start your SQL services with local admin and you have a process
> that uses xp_cmdshell to get files based upon date on a remote server. Can
> you do that?
>
> What permission will I need to apply on the remote server folders or from
> within the Sql2005 box issuing the xp_cmdshell request.
>
>
> Thanks.

28 Nov 2007 9:48 AM

Tibor Karaszi

In addition to the other posts:

If the login who executes xp_cmdshell isn't sysadmin you also need to define a proxy account.

--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi

Show quoteHide quote

"AHartman" <Hoosbr***@Kconline.com> wrote in message
news:0PmdnSu0MdRCWNHanZ2dnUVZ_gGdnZ2d@kconline.com...
> If you start your SQL services with local admin and you have a process that uses xp_cmdshell to
> get files based upon date on a remote server. Can you do that?
>
> What permission will I need to apply on the remote server folders or from within the Sql2005 box
> issuing the xp_cmdshell request.
>
>
> Thanks.