Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
dogzilla
Starting Member
3 Posts |
 Posted - 2008-04-22 : 07:31:17
|
| I have a job with a single ActiveX step that I have setup and am having problems running.If i set the SQL Server Agent to run as an Administrator then my job processes fine however under the default setup which has the SQL Server Agent running as Local System I get an error.I assume this is permissions problem so I created a basic windows user called ABC. I then created a credential called ABC linked to the windows user ABC. I then created a proxy that uses the credential ABC and then ticked the box that allows the proxy to run ActiveX scripts. I then set the ABC as a principle of the proxy.I then set my single job step to be run under the ABC credential.Still no luck. This is the first time i've worked with this sort of thing so I'm not sure if I'm going about it in the right way.Please explain how i can have a job that runs as an active X script. I understand running sql server agent as administrator is bad for security so what are the alternatives? |
|
|
coolerbob
Aged Yak Warrior
841 Posts |
Posted - 2008-04-22 : 08:22:09
|
| Why is running it as Administrator bad? That's how I've done it in the past. |
 |
|
|
dogzilla
Starting Member
3 Posts |
Posted - 2008-04-22 : 08:24:47
|
| I cant remember where i read it but it said do not run sql agent as administrator.Is that incorrect? Is it perfectly acceptable to run SQL agent as Administrator? |
|
|
|
coolerbob
Aged Yak Warrior
841 Posts |
Posted - 2008-04-22 : 10:27:44
|
| If it works, why not?I think people often do this. It's only when you get to very large/complex organizations were it becomes an issue. Others may be able to shed further light on this.Just remember that if the Network guys change the password, you'll need to change it too. |
|
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-04-22 : 23:08:57
|
| Does account abc have required permission to do whatever need to do? |
|
|
|
dogzilla
Starting Member
3 Posts |
Posted - 2008-04-23 : 04:53:22
|
| ABC is just a 'user' windows account. There are no options to give it access to ACTIVEX scripting :) That bit needs to be done in SQL 2005 under proxies doesn't it ?@coolerbob : well lots of things work but doesn't mean they are good practise. This is a new sql2005 but many users will be using it. I want it to be very secure! |
|
|
|
coolerbob
Aged Yak Warrior
841 Posts |
Posted - 2008-04-23 : 06:32:55
|
quote:
Originally posted by dogzilla
ABC is just a 'user' windows account. There are no options to give it access to ACTIVEX scripting :) That bit needs to be done in SQL 2005 under proxies doesn't it ?@coolerbob : well lots of things work but doesn't mean they are good practise. This is a new sql2005 but many users will be using it. I want it to be very secure!
of course, just thought if u know u can get it working with the admin account, you know where to start looking as to the source of your problem |
|
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-04-23 : 23:16:17
|
| You should either give abc more permission or choose another more powerful user as proxy account. |
|
|
|
|
|
|
Jobs, Proxies and SQL Agent Permissions.....