Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

XP_CmdShell Policy for Specific Database

Posted on 2013-11-04
3
Medium Priority
?
272 Views
Last Modified: 2013-11-06
I want to create a policy which enables xp_cmdshell for a specific database.  When I choose Database or DatabaseSecurity as my facet I don't get a choice for xp_cmdshell.  When I choose ServerSecurity I do.

I've also tried setting it up as a ServiceAreaConfiguration facet but then I don't see anything to select in "targets".

Bottom line, can I enable this for a specific DB or can I only enable it server wide?
0
Comment
Question by:cat4larry
  • 2
3 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 2000 total points
ID: 39623991
As you suspect, the xp_cmdshell option is a server-wide configuration option, and isn't configurable at the database level.  If enabled, xp_cmdshell does require at least CONTROL SERVER permissions to run, so it's use can be controlled.
0
 

Author Comment

by:cat4larry
ID: 39625709
do you have any links to GOOD resources regarding Policy Management on Sql Server 2012.  The MS ones, IMHO, are not very good.  They are long on wind and short on examples.

Thanks
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 39626166
Unfortunately I haven't found one, and only know the basics of Policy Mgmt.  I have only used it in testing/lab environments.  I've read chapters out of more general purpose SQL 2012 books, and haven't found them very helpful.
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Access has a limit of 255 columns in a single table; SQL Server allows tables with over 255 columns, but reading that data is not necessarily simple.  The final solution for this task involved creating a custom text parser and then reading…
One of the most important things in an application is the query performance. This article intends to give you good tips to improve the performance of your queries.
Familiarize people with the process of utilizing SQL Server functions from within Microsoft Access. Microsoft Access is a very powerful client/server development tool. One of the SQL Server objects that you can interact with from within Microsoft Ac…
Viewers will learn how to use the INSERT statement to insert data into their tables. It will also introduce the NULL statement, to show them what happens when no value is giving for any given column.

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question