|
database
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
xp_cmdshell by proxy account is not working, please helpHi,
I have SQL2000-SP3. I defined a proxy account to execute the xp_cmdshell instead of the simple sql account which I don't want to define as sysadmin. I don't succeed to execute the command as I get an unprivilaged error. If I define the simple sql account as sysadmin, everything works... (but of course I don't want to keep this situation) I will appreciate any help. I.P. Can you post the error message?
-- Show quoteTibor Karaszi, SQL Server MVP http://www.karaszi.com/sqlserver/default.asp http://www.solidqualitylearning.com/ Blog: http://solidqualitylearning.com/blogs/tibor/ "I.P." <laf***@yahoo.com> wrote in message news:db5q5c$sro$1@news.iucc.ac.il... > Hi, > > I have SQL2000-SP3. > I defined a proxy account to execute the xp_cmdshell instead of the simple > sql account which I don't want to define as sysadmin. > I don't succeed to execute the command as I get an unprivilaged error. > If I define the simple sql account as sysadmin, everything works... (but of > course I don't want to keep this situation) > > I will appreciate any help. > > I.P. > > EXECUTE permission denied on object 'xp_cmdshell', database 'master', owner
'dbo'. It's as the simple sql account tries to run the cmdshell and not the proxy account. Thanks, I.P. Show quote "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message news:eooD65HiFHA.3568@tk2msftngp13.phx.gbl... > Can you post the error message? > > -- > Tibor Karaszi, SQL Server MVP > http://www.karaszi.com/sqlserver/default.asp > http://www.solidqualitylearning.com/ > Blog: http://solidqualitylearning.com/blogs/tibor/ > > > "I.P." <laf***@yahoo.com> wrote in message > news:db5q5c$sro$1@news.iucc.ac.il... >> Hi, >> >> I have SQL2000-SP3. >> I defined a proxy account to execute the xp_cmdshell instead of the >> simple sql account which I don't want to define as sysadmin. >> I don't succeed to execute the command as I get an unprivilaged error. >> If I define the simple sql account as sysadmin, everything works... (but >> of course I don't want to keep this situation) >> >> I will appreciate any help. >> >> I.P. >> You must grant execute permissions on xp_cmdshell to a user for each login in master that need to do
this. Identify the SQL Server logins that need to do this, add them as users to the master database, grant execute permissions on xp_cmdshell. Now SQL Server can use your configured proxy account when doing stuff at the OS level (xp_cmdshell) for those logins. -- Show quoteTibor Karaszi, SQL Server MVP http://www.karaszi.com/sqlserver/default.asp http://www.solidqualitylearning.com/ Blog: http://solidqualitylearning.com/blogs/tibor/ "I.P." <laf***@yahoo.com> wrote in message news:db5ska$u3r$1@news.iucc.ac.il... > EXECUTE permission denied on object 'xp_cmdshell', database 'master', owner 'dbo'. > > It's as the simple sql account tries to run the cmdshell and not the proxy account. > > Thanks, > > I.P. > > "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message > news:eooD65HiFHA.3568@tk2msftngp13.phx.gbl... >> Can you post the error message? >> >> -- >> Tibor Karaszi, SQL Server MVP >> http://www.karaszi.com/sqlserver/default.asp >> http://www.solidqualitylearning.com/ >> Blog: http://solidqualitylearning.com/blogs/tibor/ >> >> >> "I.P." <laf***@yahoo.com> wrote in message news:db5q5c$sro$1@news.iucc.ac.il... >>> Hi, >>> >>> I have SQL2000-SP3. >>> I defined a proxy account to execute the xp_cmdshell instead of the simple sql account which I >>> don't want to define as sysadmin. >>> I don't succeed to execute the command as I get an unprivilaged error. >>> If I define the simple sql account as sysadmin, everything works... (but of course I don't want >>> to keep this situation) >>> >>> I will appreciate any help. >>> >>> I.P. >>> > Tibor,
Thanks for the answer. my delay is because of the weekend. I did all this and I logged in to the query analyzer as the simple user. I tried to execute the stored procedure with the xp_cmdshell and that's what I got: Msg 50001, Level 1, State 50001 xpsql.cpp: Error 1326 from LogonUserW on line 620 Anything you can help about? I.P. Show quote "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message news:u1tsQcIiFHA.708@TK2MSFTNGP09.phx.gbl... > You must grant execute permissions on xp_cmdshell to a user for each login > in master that need to do this. Identify the SQL Server logins that need > to do this, add them as users to the master database, grant execute > permissions on xp_cmdshell. Now SQL Server can use your configured proxy > account when doing stuff at the OS level (xp_cmdshell) for those logins. > > -- > Tibor Karaszi, SQL Server MVP > http://www.karaszi.com/sqlserver/default.asp > http://www.solidqualitylearning.com/ > Blog: http://solidqualitylearning.com/blogs/tibor/ > > > "I.P." <laf***@yahoo.com> wrote in message > news:db5ska$u3r$1@news.iucc.ac.il... >> EXECUTE permission denied on object 'xp_cmdshell', database 'master', >> owner 'dbo'. >> >> It's as the simple sql account tries to run the cmdshell and not the >> proxy account. >> >> Thanks, >> >> I.P. >> >> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote >> in message news:eooD65HiFHA.3568@tk2msftngp13.phx.gbl... >>> Can you post the error message? >>> >>> -- >>> Tibor Karaszi, SQL Server MVP >>> http://www.karaszi.com/sqlserver/default.asp >>> http://www.solidqualitylearning.com/ >>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>> >>> >>> "I.P." <laf***@yahoo.com> wrote in message >>> news:db5q5c$sro$1@news.iucc.ac.il... >>>> Hi, >>>> >>>> I have SQL2000-SP3. >>>> I defined a proxy account to execute the xp_cmdshell instead of the >>>> simple sql account which I don't want to define as sysadmin. >>>> I don't succeed to execute the command as I get an unprivilaged error. >>>> If I define the simple sql account as sysadmin, everything works... >>>> (but of course I don't want to keep this situation) >>>> >>>> I will appreciate any help. >>>> >>>> I.P. >>>> >> > Sounds to me like the SQL Server service account might be missing some privileges. Search Books
Online for "level token" and see if you done all the things needed to be done. -- Show quoteTibor Karaszi, SQL Server MVP http://www.karaszi.com/sqlserver/default.asp http://www.solidqualitylearning.com/ Blog: http://solidqualitylearning.com/blogs/tibor/ "I.P." <laf***@yahoo.com> wrote in message news:dbdl5r$kvo$1@news.iucc.ac.il... > Tibor, > > Thanks for the answer. my delay is because of the weekend. > > I did all this and I logged in to the query analyzer as the simple user. I tried to execute the > stored procedure with the xp_cmdshell and that's what I got: > > Msg 50001, Level 1, State 50001 > xpsql.cpp: Error 1326 from LogonUserW on line 620 > > Anything you can help about? > > I.P. > > > > "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message > news:u1tsQcIiFHA.708@TK2MSFTNGP09.phx.gbl... >> You must grant execute permissions on xp_cmdshell to a user for each login in master that need to >> do this. Identify the SQL Server logins that need to do this, add them as users to the master >> database, grant execute permissions on xp_cmdshell. Now SQL Server can use your configured proxy >> account when doing stuff at the OS level (xp_cmdshell) for those logins. >> >> -- >> Tibor Karaszi, SQL Server MVP >> http://www.karaszi.com/sqlserver/default.asp >> http://www.solidqualitylearning.com/ >> Blog: http://solidqualitylearning.com/blogs/tibor/ >> >> >> "I.P." <laf***@yahoo.com> wrote in message news:db5ska$u3r$1@news.iucc.ac.il... >>> EXECUTE permission denied on object 'xp_cmdshell', database 'master', owner 'dbo'. >>> >>> It's as the simple sql account tries to run the cmdshell and not the proxy account. >>> >>> Thanks, >>> >>> I.P. >>> >>> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message >>> news:eooD65HiFHA.3568@tk2msftngp13.phx.gbl... >>>> Can you post the error message? >>>> >>>> -- >>>> Tibor Karaszi, SQL Server MVP >>>> http://www.karaszi.com/sqlserver/default.asp >>>> http://www.solidqualitylearning.com/ >>>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>>> >>>> >>>> "I.P." <laf***@yahoo.com> wrote in message news:db5q5c$sro$1@news.iucc.ac.il... >>>>> Hi, >>>>> >>>>> I have SQL2000-SP3. >>>>> I defined a proxy account to execute the xp_cmdshell instead of the simple sql account which I >>>>> don't want to define as sysadmin. >>>>> I don't succeed to execute the command as I get an unprivilaged error. >>>>> If I define the simple sql account as sysadmin, everything works... (but of course I don't >>>>> want to keep this situation) >>>>> >>>>> I will appreciate any help. >>>>> >>>>> I.P. >>>>> >>> >> > > It seems I did everything right but it's not working.
It is working when I grant the sys admin server role to this simple user, and this I don't want to do. Show quote "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message news:ecETUQxiFHA.3028@TK2MSFTNGP10.phx.gbl... > Sounds to me like the SQL Server service account might be missing some > privileges. Search Books Online for "level token" and see if you done all > the things needed to be done. > > -- > Tibor Karaszi, SQL Server MVP > http://www.karaszi.com/sqlserver/default.asp > http://www.solidqualitylearning.com/ > Blog: http://solidqualitylearning.com/blogs/tibor/ > > > "I.P." <laf***@yahoo.com> wrote in message > news:dbdl5r$kvo$1@news.iucc.ac.il... >> Tibor, >> >> Thanks for the answer. my delay is because of the weekend. >> >> I did all this and I logged in to the query analyzer as the simple user. >> I tried to execute the stored procedure with the xp_cmdshell and that's >> what I got: >> >> Msg 50001, Level 1, State 50001 >> xpsql.cpp: Error 1326 from LogonUserW on line 620 >> >> Anything you can help about? >> >> I.P. >> >> >> >> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote >> in message news:u1tsQcIiFHA.708@TK2MSFTNGP09.phx.gbl... >>> You must grant execute permissions on xp_cmdshell to a user for each >>> login in master that need to do this. Identify the SQL Server logins >>> that need to do this, add them as users to the master database, grant >>> execute permissions on xp_cmdshell. Now SQL Server can use your >>> configured proxy account when doing stuff at the OS level (xp_cmdshell) >>> for those logins. >>> >>> -- >>> Tibor Karaszi, SQL Server MVP >>> http://www.karaszi.com/sqlserver/default.asp >>> http://www.solidqualitylearning.com/ >>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>> >>> >>> "I.P." <laf***@yahoo.com> wrote in message >>> news:db5ska$u3r$1@news.iucc.ac.il... >>>> EXECUTE permission denied on object 'xp_cmdshell', database 'master', >>>> owner 'dbo'. >>>> >>>> It's as the simple sql account tries to run the cmdshell and not the >>>> proxy account. >>>> >>>> Thanks, >>>> >>>> I.P. >>>> >>>> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> >>>> wrote in message news:eooD65HiFHA.3568@tk2msftngp13.phx.gbl... >>>>> Can you post the error message? >>>>> >>>>> -- >>>>> Tibor Karaszi, SQL Server MVP >>>>> http://www.karaszi.com/sqlserver/default.asp >>>>> http://www.solidqualitylearning.com/ >>>>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>>>> >>>>> >>>>> "I.P." <laf***@yahoo.com> wrote in message >>>>> news:db5q5c$sro$1@news.iucc.ac.il... >>>>>> Hi, >>>>>> >>>>>> I have SQL2000-SP3. >>>>>> I defined a proxy account to execute the xp_cmdshell instead of the >>>>>> simple sql account which I don't want to define as sysadmin. >>>>>> I don't succeed to execute the command as I get an unprivilaged >>>>>> error. >>>>>> If I define the simple sql account as sysadmin, everything works... >>>>>> (but of course I don't want to keep this situation) >>>>>> >>>>>> I will appreciate any help. >>>>>> >>>>>> I.P. >>>>>> >>>> >>> >> >> > Well,
I played a little with the proxy account and succeeded at last to operate the xp_cmdshell. Thank you for your help. I.P. Show quote "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message news:ecETUQxiFHA.3028@TK2MSFTNGP10.phx.gbl... > Sounds to me like the SQL Server service account might be missing some > privileges. Search Books Online for "level token" and see if you done all > the things needed to be done. > > -- > Tibor Karaszi, SQL Server MVP > http://www.karaszi.com/sqlserver/default.asp > http://www.solidqualitylearning.com/ > Blog: http://solidqualitylearning.com/blogs/tibor/ > > > "I.P." <laf***@yahoo.com> wrote in message > news:dbdl5r$kvo$1@news.iucc.ac.il... >> Tibor, >> >> Thanks for the answer. my delay is because of the weekend. >> >> I did all this and I logged in to the query analyzer as the simple user. >> I tried to execute the stored procedure with the xp_cmdshell and that's >> what I got: >> >> Msg 50001, Level 1, State 50001 >> xpsql.cpp: Error 1326 from LogonUserW on line 620 >> >> Anything you can help about? >> >> I.P. >> >> >> >> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote >> in message news:u1tsQcIiFHA.708@TK2MSFTNGP09.phx.gbl... >>> You must grant execute permissions on xp_cmdshell to a user for each >>> login in master that need to do this. Identify the SQL Server logins >>> that need to do this, add them as users to the master database, grant >>> execute permissions on xp_cmdshell. Now SQL Server can use your >>> configured proxy account when doing stuff at the OS level (xp_cmdshell) >>> for those logins. >>> >>> -- >>> Tibor Karaszi, SQL Server MVP >>> http://www.karaszi.com/sqlserver/default.asp >>> http://www.solidqualitylearning.com/ >>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>> >>> >>> "I.P." <laf***@yahoo.com> wrote in message >>> news:db5ska$u3r$1@news.iucc.ac.il... >>>> EXECUTE permission denied on object 'xp_cmdshell', database 'master', >>>> owner 'dbo'. >>>> >>>> It's as the simple sql account tries to run the cmdshell and not the >>>> proxy account. >>>> >>>> Thanks, >>>> >>>> I.P. >>>> >>>> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> >>>> wrote in message news:eooD65HiFHA.3568@tk2msftngp13.phx.gbl... >>>>> Can you post the error message? >>>>> >>>>> -- >>>>> Tibor Karaszi, SQL Server MVP >>>>> http://www.karaszi.com/sqlserver/default.asp >>>>> http://www.solidqualitylearning.com/ >>>>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>>>> >>>>> >>>>> "I.P." <laf***@yahoo.com> wrote in message >>>>> news:db5q5c$sro$1@news.iucc.ac.il... >>>>>> Hi, >>>>>> >>>>>> I have SQL2000-SP3. >>>>>> I defined a proxy account to execute the xp_cmdshell instead of the >>>>>> simple sql account which I don't want to define as sysadmin. >>>>>> I don't succeed to execute the command as I get an unprivilaged >>>>>> error. >>>>>> If I define the simple sql account as sysadmin, everything works... >>>>>> (but of course I don't want to keep this situation) >>>>>> >>>>>> I will appreciate any help. >>>>>> >>>>>> I.P. >>>>>> >>>> >>> >> >> > Hi,
Something VERY crazy. It's working fine but after few hours it stops working. Then I'm reseting the proxy account in the sql server agent, typing again the password, and it start to respond again. Anything that you can think about such crazy phenomenon? Thanks, I.P. Show quote "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message news:ecETUQxiFHA.3028@TK2MSFTNGP10.phx.gbl... > Sounds to me like the SQL Server service account might be missing some > privileges. Search Books Online for "level token" and see if you done all > the things needed to be done. > > -- > Tibor Karaszi, SQL Server MVP > http://www.karaszi.com/sqlserver/default.asp > http://www.solidqualitylearning.com/ > Blog: http://solidqualitylearning.com/blogs/tibor/ > > > "I.P." <laf***@yahoo.com> wrote in message > news:dbdl5r$kvo$1@news.iucc.ac.il... >> Tibor, >> >> Thanks for the answer. my delay is because of the weekend. >> >> I did all this and I logged in to the query analyzer as the simple user. >> I tried to execute the stored procedure with the xp_cmdshell and that's >> what I got: >> >> Msg 50001, Level 1, State 50001 >> xpsql.cpp: Error 1326 from LogonUserW on line 620 >> >> Anything you can help about? >> >> I.P. >> >> >> >> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote >> in message news:u1tsQcIiFHA.708@TK2MSFTNGP09.phx.gbl... >>> You must grant execute permissions on xp_cmdshell to a user for each >>> login in master that need to do this. Identify the SQL Server logins >>> that need to do this, add them as users to the master database, grant >>> execute permissions on xp_cmdshell. Now SQL Server can use your >>> configured proxy account when doing stuff at the OS level (xp_cmdshell) >>> for those logins. >>> >>> -- >>> Tibor Karaszi, SQL Server MVP >>> http://www.karaszi.com/sqlserver/default.asp >>> http://www.solidqualitylearning.com/ >>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>> >>> >>> "I.P." <laf***@yahoo.com> wrote in message >>> news:db5ska$u3r$1@news.iucc.ac.il... >>>> EXECUTE permission denied on object 'xp_cmdshell', database 'master', >>>> owner 'dbo'. >>>> >>>> It's as the simple sql account tries to run the cmdshell and not the >>>> proxy account. >>>> >>>> Thanks, >>>> >>>> I.P. >>>> >>>> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> >>>> wrote in message news:eooD65HiFHA.3568@tk2msftngp13.phx.gbl... >>>>> Can you post the error message? >>>>> >>>>> -- >>>>> Tibor Karaszi, SQL Server MVP >>>>> http://www.karaszi.com/sqlserver/default.asp >>>>> http://www.solidqualitylearning.com/ >>>>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>>>> >>>>> >>>>> "I.P." <laf***@yahoo.com> wrote in message >>>>> news:db5q5c$sro$1@news.iucc.ac.il... >>>>>> Hi, >>>>>> >>>>>> I have SQL2000-SP3. >>>>>> I defined a proxy account to execute the xp_cmdshell instead of the >>>>>> simple sql account which I don't want to define as sysadmin. >>>>>> I don't succeed to execute the command as I get an unprivilaged >>>>>> error. >>>>>> If I define the simple sql account as sysadmin, everything works... >>>>>> (but of course I don't want to keep this situation) >>>>>> >>>>>> I will appreciate any help. >>>>>> >>>>>> I.P. >>>>>> >>>> >>> >> >> > Sorry, I'm out of ideas. Sound more like a Windows problem to me, but not being a Windows expert, I
don't really know where to start troubleshoot. -- Show quoteTibor Karaszi, SQL Server MVP http://www.karaszi.com/sqlserver/default.asp http://www.solidqualitylearning.com/ Blog: http://solidqualitylearning.com/blogs/tibor/ "I.P." <laf***@yahoo.com> wrote in message news:dbiidf$6lk$1@news.iucc.ac.il... > Hi, > > Something VERY crazy. It's working fine but after few hours it stops working. Then I'm reseting > the proxy account in the sql server agent, typing again the password, and it start to respond > again. > Anything that you can think about such crazy phenomenon? > > Thanks, > > I.P. > > "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message > news:ecETUQxiFHA.3028@TK2MSFTNGP10.phx.gbl... >> Sounds to me like the SQL Server service account might be missing some privileges. Search Books >> Online for "level token" and see if you done all the things needed to be done. >> >> -- >> Tibor Karaszi, SQL Server MVP >> http://www.karaszi.com/sqlserver/default.asp >> http://www.solidqualitylearning.com/ >> Blog: http://solidqualitylearning.com/blogs/tibor/ >> >> >> "I.P." <laf***@yahoo.com> wrote in message news:dbdl5r$kvo$1@news.iucc.ac.il... >>> Tibor, >>> >>> Thanks for the answer. my delay is because of the weekend. >>> >>> I did all this and I logged in to the query analyzer as the simple user. I tried to execute the >>> stored procedure with the xp_cmdshell and that's what I got: >>> >>> Msg 50001, Level 1, State 50001 >>> xpsql.cpp: Error 1326 from LogonUserW on line 620 >>> >>> Anything you can help about? >>> >>> I.P. >>> >>> >>> >>> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message >>> news:u1tsQcIiFHA.708@TK2MSFTNGP09.phx.gbl... >>>> You must grant execute permissions on xp_cmdshell to a user for each login in master that need >>>> to do this. Identify the SQL Server logins that need to do this, add them as users to the >>>> master database, grant execute permissions on xp_cmdshell. Now SQL Server can use your >>>> configured proxy account when doing stuff at the OS level (xp_cmdshell) for those logins. >>>> >>>> -- >>>> Tibor Karaszi, SQL Server MVP >>>> http://www.karaszi.com/sqlserver/default.asp >>>> http://www.solidqualitylearning.com/ >>>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>>> >>>> >>>> "I.P." <laf***@yahoo.com> wrote in message news:db5ska$u3r$1@news.iucc.ac.il... >>>>> EXECUTE permission denied on object 'xp_cmdshell', database 'master', owner 'dbo'. >>>>> >>>>> It's as the simple sql account tries to run the cmdshell and not the proxy account. >>>>> >>>>> Thanks, >>>>> >>>>> I.P. >>>>> >>>>> "Tibor Karaszi" <tibor_please.no.email_kara***@hotmail.nomail.com> wrote in message >>>>> news:eooD65HiFHA.3568@tk2msftngp13.phx.gbl... >>>>>> Can you post the error message? >>>>>> >>>>>> -- >>>>>> Tibor Karaszi, SQL Server MVP >>>>>> http://www.karaszi.com/sqlserver/default.asp >>>>>> http://www.solidqualitylearning.com/ >>>>>> Blog: http://solidqualitylearning.com/blogs/tibor/ >>>>>> >>>>>> >>>>>> "I.P." <laf***@yahoo.com> wrote in message news:db5q5c$sro$1@news.iucc.ac.il... >>>>>>> Hi, >>>>>>> >>>>>>> I have SQL2000-SP3. >>>>>>> I defined a proxy account to execute the xp_cmdshell instead of the simple sql account which >>>>>>> I don't want to define as sysadmin. >>>>>>> I don't succeed to execute the command as I get an unprivilaged error. >>>>>>> If I define the simple sql account as sysadmin, everything works... (but of course I don't >>>>>>> want to keep this situation) >>>>>>> >>>>>>> I will appreciate any help. >>>>>>> >>>>>>> I.P. >>>>>>> >>>>> >>>> >>> >>> >> > >  |
|||||||||||||||||||||||
Other interesting topics