Solved

XP_CmdShell Policy for Specific Database

Posted on 2013-11-04
3
261 Views
Last Modified: 2013-11-06
I want to create a policy which enables xp_cmdshell for a specific database.  When I choose Database or DatabaseSecurity as my facet I don't get a choice for xp_cmdshell.  When I choose ServerSecurity I do.

I've also tried setting it up as a ServiceAreaConfiguration facet but then I don't see anything to select in "targets".

Bottom line, can I enable this for a specific DB or can I only enable it server wide?
0
Comment
Question by:cat4larry
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 500 total points
ID: 39623991
As you suspect, the xp_cmdshell option is a server-wide configuration option, and isn't configurable at the database level.  If enabled, xp_cmdshell does require at least CONTROL SERVER permissions to run, so it's use can be controlled.
0
 

Author Comment

by:cat4larry
ID: 39625709
do you have any links to GOOD resources regarding Policy Management on Sql Server 2012.  The MS ones, IMHO, are not very good.  They are long on wind and short on examples.

Thanks
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 39626166
Unfortunately I haven't found one, and only know the basics of Policy Mgmt.  I have only used it in testing/lab environments.  I've read chapters out of more general purpose SQL 2012 books, and haven't found them very helpful.
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to reset the password of the sa account on a Microsoft SQL Server.  The steps in this article work in SQL 2005, 2008, 2008 R2, 2012, 2014 and 2016.
This article shows gives you an overview on SQL Server 2016 row level security. You will also get to know the usages of row-level-security and how it works
Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.
Viewers will learn how to use the UPDATE and DELETE statements to change or remove existing data from their tables. Make a table: Update a specific column given a specific row using the UPDATE statement: Remove a set of values using the DELETE s…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question