• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 300
  • Last Modified:

proxy login account can't execute xp_cmdshell

Thsi really weird to me and I really dunno how to fix it.

1: Login has been granted for Database role "CanUseXP_cmdshell" and it has access in master db.
2: when I test the login it says access is denied.
3: hwen I try to access the path using windows with using this login it works to display me the directory.
4: XP_cmdshell has been set to 1 in sp_configure
5: Few logins which have same privileged have no issues to execute the xp_cmdshell
I also have my test server where the same users exist and connected to the same path and it works fine from test server

what am I missing  which caused the login cannot use to execute xp_cmdshell ?
0
motioneye
Asked:
motioneye
  • 3
  • 2
1 Solution
 
clinker83Commented:
What version of Windows Server and SQL are you using?

I've recently seen problems with cmdshell in Server 2008 with SQL 2005 where we had agent jobs which had steps with cmdshell not working properly. The solution was to map drives, providing user credentials, where script needed access to files.

If your cmdshell is trying to access files you may need to script the mapping of a drive:
E.G.
net use Z: \\servername\sharename password /user:username
0
 
motioneyeAuthor Commented:
Hi,
We are using sql2008 std edition. Let me try with the suggestion then come back to u guys
0
 
motioneyeAuthor Commented:
Thanks it work,
But I curious ...


when I ran under my context, it display me the folder, but I do not have access to the folder below

exec master..xp_cmdshell 'dir \\servername22\sharedfolder$\pckg\*.*'
select SUSER_SNAME()
select @@servername
revert

Then I try from the other sql instance query with same command above, it says "access is denied " You have any explanation for this ?
0
 
clinker83Commented:
No perhaps someone else might have some ideas. We were mapping the drive as a workaround solution. We assumed than it was a bug in Server2k8 missed by Microsoft.
0
 
clinker83Commented:
No perhaps someone else might have some ideas. We were mapping the drive as a workaround solution. We assumed than it was a bug in Server2k8 missed by Microsoft.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now