Solved

XP_CmdShell Policy for Specific Database

Posted on 2013-11-04
3
257 Views
Last Modified: 2013-11-06
I want to create a policy which enables xp_cmdshell for a specific database.  When I choose Database or DatabaseSecurity as my facet I don't get a choice for xp_cmdshell.  When I choose ServerSecurity I do.

I've also tried setting it up as a ServiceAreaConfiguration facet but then I don't see anything to select in "targets".

Bottom line, can I enable this for a specific DB or can I only enable it server wide?
0
Comment
Question by:cat4larry
  • 2
3 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 500 total points
ID: 39623991
As you suspect, the xp_cmdshell option is a server-wide configuration option, and isn't configurable at the database level.  If enabled, xp_cmdshell does require at least CONTROL SERVER permissions to run, so it's use can be controlled.
0
 

Author Comment

by:cat4larry
ID: 39625709
do you have any links to GOOD resources regarding Policy Management on Sql Server 2012.  The MS ones, IMHO, are not very good.  They are long on wind and short on examples.

Thanks
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 39626166
Unfortunately I haven't found one, and only know the basics of Policy Mgmt.  I have only used it in testing/lab environments.  I've read chapters out of more general purpose SQL 2012 books, and haven't found them very helpful.
0

Featured Post

Active Directory Webinar

We all know we need to protect and secure our privileges, but where to start? Join Experts Exchange and ManageEngine on Tuesday, April 11, 2017 10:00 AM PDT to learn how to track and secure privileged users in Active Directory.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
tempdb log keep growing 7 34
Row insertion failed. Array 5 48
SQL Server How-To Show Notes In First Row of Results 4 31
sql server query 18 42
Slowly Changing Dimension Transformation component in data task flow is very useful for us to manage and control how data changes in SSIS.
This article shows gives you an overview on SQL Server 2016 row level security. You will also get to know the usages of row-level-security and how it works
Familiarize people with the process of retrieving data from SQL Server using an Access pass-thru query. Microsoft Access is a very powerful client/server development tool. One of the ways that you can retrieve data from a SQL Server is by using a pa…
This video shows, step by step, how to configure Oracle Heterogeneous Services via the Generic Gateway Agent in order to make a connection from an Oracle session and access a remote SQL Server database table.

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question