Databases
StackOverflow2013
Postsdbo
POExecute xp_cmdshell command as specific user
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POExecute xp_cmdshell command as specific user
    primarykey
    data
    text
    <p>I would like to run <strong>xp_cmdshell</strong> (TSQL procedure) in order to mount a network drive and then access remotes mdb files.</p> <p>I am administrator on the MS SQL server and I have allowed <strong>xp_cmdshell</strong> execution accordingly.</p> <p>However, there is still a problem:</p> <ul> <li><p>When I call xp_cmdshell, the user executing the command is the SQL <em>SysAdmin</em>, i.e. the account who run SQL Server process.</p></li> <li><p>I wish <strong>xp_cmdshell</strong> executes as the account with which I'm connected to SQL server, i.e <em>Administrator</em></p></li> </ul> <p>Both of theses account are in administrator group, SQLAdmin group, and are granted to CONTROL SERVER. Both users belong to the same domain. All of this is run on the same machine.</p> <p>Because of this conflict, I cannot use a network drive because it is mounted for <em>SysAdmin</em> and not for <em>Administrator</em><br> I tried to use <strong>sp_ xp_ cmdshell_ proxy_ account</strong> to specify the account with which I want to run <strong>xp_cmdshell</strong>, but <em>SysAdmin</em> is still the used account.</p> <p>Therefore, this code :<br> <code>select user_name(), suser_name;</code><br> <code>exec xp_cmdshell 'echo %username%';</code> </p> <p>displays :<br> <code>Administrator Administrator</code><br> <code>SysAdmin</code></p> <p>Does anybody knows how to impersonate well the <strong>xp_cmdshell</strong> command ? Is there something to (re)configure?</p> <p>Thanks for your help.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PTQuestion
    1. USJoel Coehoorn
    1. USAntwan
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POExecute xp_cmdshell command as specific user
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POExecute xp_cmdshell command as specific user
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. POExecute xp_cmdshell command as specific user
      1. This table or related slice is empty.
      1. VTUpMod
    1. COThe proxy account is only used when non-sysadmin users execute xp_cmdshell
      singulars
      1. POExecute xp_cmdshell command as specific user
      1. USEd Harper
    2. COThen how can I force a specific sysadmin user ?
      singulars
      1. POExecute xp_cmdshell command as specific user
      1. USAntwan
    3. COJust to clarify - you've used sp_xp_cmd_shell_proxy_account to set the account you want to use, and then executed the command using xp_cmdshell, and the account used is still the service account? I just want to make sure I understand your steps.
      singulars
      1. POExecute xp_cmdshell command as specific user
      1. USSqlRyan
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload