I'd like to find out what users on a SQL Server system can execute xp_cmdshell. Is there a query that will do this?
I'd like to know how to do it for SQL Server 2000 - 2008
Googling "xp_cmdshell":
When first enabled, xp_cmdshell requires CONTROL SERVER
permission to execute and the Windows process created by
xp_cmdshell has the same security context as the SQL Server
service account.
http://msdn.microsoft.com/en-us/library/ms175046.aspx
Related
I'm encountering a problem on Microsoft SQL Server. SQL Server Agent is not running, when I tried to start it and refresh the services.msc the SQL Server Agent is not running anymore. When I see the logs on event viewer. There are no errors but a message "SQLServerAgent service successfully stopped"
Here is the log.
SQLServerAgent service successfully started
SQLServerAgent service successfully stopped.
SQLEXPRESS does not include the SQL Server Agent aspect of the product.
You need to have SQL Server Standard Edition (or greater) to get the SQL Server Agent functionality.
That said, there may be other ways to achieve the results you desire. You could build a simple .NET app or PowerShell script to execute your query or stored procedure, and schedule that to execute via Windows own task scheduler. It is in many ways not as robust as SQL Server Agent, but it is also not as restrictive (you're running under a Windows process as opposed to SQL Server, so you have more options as to how the application may work).
Is possible to have windows authentication with connect, read and write rights, but without possibility the user has rights to connect with SQL Management Studio? I want the user has rights to connect and execute queries with his own domain username from an application, but not to connect from SQL Management Studio.
The only solution which I have succeeded to find is this: Define login only with rights to execute stored procedures, then move all queries to SP. By this way you can connect with SQL Management Studio but cannot list any table or change anything or even see the table/sp names.
I have a windows 7 run SQL server (I don't know what is kind of SQL) of my colleague.
My colleague is stopped work.
I don't know password windows, password sql,and sql file,...
I tried crack pass windows using hirent boot but failed, and I can't load partition to remove syskey password.
His machine is sql server.
I can't connection to his machine.
I have a question:
How to get database on his machine without login windows?
Thank all
If the service of SQL server stopped, you can copy database file and copy in other location, and can attach this file to another SQL server database engine. also you can know version of your SQL server by using SQL Server connection management, and also SQL server query (select ##Version ) if you can execute query.
I just finished the conception of a simple Java project and my client wants to use SQL Server as a Database,
i downloaded SQL Server 2008, i tried to use SQLPlus to execute the queries but i didn't find any tutorial in the internet on how to use SQLPlus in SQL Server.
Can anyone Help me please.
Check out SQLS*Plus - this is SQL*Plus for SQL server. Their web site is http://www.sqlsplus.com/
I have a requirement to change the service logon accounts for the SQL server 2008 services through script. I know we can do this manaually using Sql Server Configuration Manager. But i couldnt find a script for achieving this.
Found via Google ("change sql 2008 service account programatically"), modifies the account using WMI:
http://blogs.msdn.com/b/mwories/archive/2006/11/03/wmi_5f00_change_5f00_password.aspx