Solved

XP_CmdShell Policy for Specific Database

Posted on 2013-11-04
3
253 Views
Last Modified: 2013-11-06
I want to create a policy which enables xp_cmdshell for a specific database.  When I choose Database or DatabaseSecurity as my facet I don't get a choice for xp_cmdshell.  When I choose ServerSecurity I do.

I've also tried setting it up as a ServiceAreaConfiguration facet but then I don't see anything to select in "targets".

Bottom line, can I enable this for a specific DB or can I only enable it server wide?
0
Comment
Question by:cat4larry
  • 2
3 Comments
 
LVL 29

Accepted Solution

by:
Rich Weissler earned 500 total points
ID: 39623991
As you suspect, the xp_cmdshell option is a server-wide configuration option, and isn't configurable at the database level.  If enabled, xp_cmdshell does require at least CONTROL SERVER permissions to run, so it's use can be controlled.
0
 

Author Comment

by:cat4larry
ID: 39625709
do you have any links to GOOD resources regarding Policy Management on Sql Server 2012.  The MS ones, IMHO, are not very good.  They are long on wind and short on examples.

Thanks
0
 
LVL 29

Expert Comment

by:Rich Weissler
ID: 39626166
Unfortunately I haven't found one, and only know the basics of Policy Mgmt.  I have only used it in testing/lab environments.  I've read chapters out of more general purpose SQL 2012 books, and haven't found them very helpful.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ASP.NET 5 Templates 2 66
Splitting the content of a column in SQL 11 21
Update SQL to SP1 on SCCM server 7 8
sql server group by every 2hrs 5 19
Having an SQL database can be a big investment for a small company. Hardware, setup and of course, the price of software all add up to a big bill that some companies may not be able to absorb.  Luckily, there is a free version SQL Express, but does …
Ever wondered why sometimes your SQL Server is slow or unresponsive with connections spiking up but by the time you go in, all is well? The following article will show you how to install and configure a SQL job that will send you email alerts includ…
Via a live example, show how to extract information from SQL Server on Database, Connection and Server properties
Via a live example, show how to shrink a transaction log file down to a reasonable size.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now