Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 ActiveX, sysadmin, proxy account

Author  Topic 

AskSQLTeam
Ask SQLTeam Question

0 Posts

Posted - 2002-06-07 : 08:21:50
Don writes "I have a group of jobs that invoke ActiveX scripts and I need to grant access to the jobs to 4 non-sysadmin users for monitoring, scheduling, modifications.

I considered creating a single non-admin account they can all use and making it the owner of the job.

I currently have xp_cmdshell and ActiveX disabled for non-admin users. If I'm reading BOL correctly, for the above scenario to work I would have to create a proxy account that the jobs could use to execute the ActiveX steps of the jobs.

My Questions
1. Is there a better way to do this?
2. What security holes am I opening by creating a proxy account and not disallowing xp_cmdshell and ActiveX to non-admin users. "
   

- Advertisement -