error 997 from getproxyaccount
von GoogleAnmeldenAusgeblendete FelderNach Gruppen oder Nachrichten suchen
But I tried in an remote machine and display this issue: Msg 50001, Level 1, State 50001 xpsql.cpp: Error 997 from GetProxyAccount on line 472 The user have this: Permissions: All Server Roles: System Administrator, Security Administrator, Process Administrator. Database Acess: DB Master with Database Role of db_owner, db_accessadmin, db_securityadmin, db_ddladmin, db_datareader, db_datawriter What else I can do, to make it work? Thx. sp_ArchPlano.sql 2K Download Top xpsql.cpp: Error 997 from https://groups.google.com/d/topic/microsoft.public.sqlserver.connect/UFcLXfWIWk0 GetProxyAccount by oj » Fri, 08 Nov 2002 12:25:51 the remote server has been patched with a security hot-fix (665). --restrict to admin only. 1=yes, 0=no -- -oj http://www.rac4sql.net Quote:> I run this Store procedure in local machine and it works: > exec sp_archplano '20021101','20021130' > But I tried in an remote machine and display this http://www.verycomputer.com/156_2b794f6dc6b9bc38_1.htm issue: > Msg 50001, Level 1, State 50001 > xpsql.cpp: Error 997 from GetProxyAccount on line 472 > The user have this: > Permissions: All > Server Roles: > System Administrator, Security Administrator, Process > Administrator. > Database Acess: > DB Master with Database Role of db_owner, db_accessadmin, > db_securityadmin, db_ddladmin, db_datareader, db_datawriter > What else I can do, to make it work? > Thx. Top 1. xpsql.cpp: Error 997 from GetProxyAccount on line 472 I recently posted a message querying for help creating a file from SQL Server 2000 that did not use xp_cmdshell because of securty issues. As a first approach, and not taking care of it, I have granted public group to execute xp_cmdshell so that they could do: I thought that granting execution rights to that XP would be enough, but it seems it is not. Now, everytime a user (not administrator) tries to execute that XP they get the following error: xpsql.cpp: Error 997 from GetProxyAccount on line 472 Wh
The necessary permissions for theaccount are usually handled when making the changes throughEnterprise Manager, otherwise you need to check thesemanually. http://microsoft.public.sqlserver.security.narkive.com/s9EV9jRo/xp-cmdshell-error-997-from-getproxyaccount-on-line-604 Refer to the following for more information on thepermissions, rights needed:HOW TO: Change the SQL Server or SQL Server Agent ServiceAccount Without Using SQL Enterprise Manager in SQL Server2000http://support.microsoft.com/?id=283811-SueOn Wed, 26 Nov 2003 06:15:25 -0800, "Anthony"We try to execute xp_cmdshell from an non-sa SQL login ,so we have to setup error 997 a domain proxy account for thisError 997 from GetProxyAccount on line 604We've done lots of tests, unless we put the serviceaccount for MSSQLSERVER servcice as member of local Admingroup, then it works with NO problemIt seems that here is some contradiction to our basicsecurity principle, we tried to limit the no. error 997 from of SQL loginwith sa fixed server role ,therefore we only grantedexplicit execution permission for xp_cmdshell to certainSQL logins ; however, we have to put SQL service a/c intolocal domain group, which may expose a higher risk tobuffer overrun vulnerabilty ...etcAny comment..or same experience ? Anthony 2003-11-27 19:46:13 UTC PermalinkRaw Message Yes, everything is changed through Entperrise Manager,and this problem is recreatable Kevin McDonnell [MSFT] 2003-12-01 23:08:16 UTC PermalinkRaw Message That combination doesn't work unfortunately. This is a known problem.Can you explain why you want to give your users xp_cmdshell access?Perhaps there's another way of doing what you need to get done.Thanks,Kevin McDonnellMicrosoft CorporationThis posting is provided AS IS with no warranties, and confers no rights. 2 Replies 2 Views Switch to linear view Disable enhanced parsing Permalink to this page Thread Navigation Sue Hoegemeier 2003-11-26 15:40:56 UTC Anthony 2003-11-27 19:46:13 UTC Kevin McDonnell [MSFT] 2003-12-01 23:08:16 UTC about - legalese Loading...