Tuesday, March 27, 2012

Error 87 from GetProxyAccount on line 604

Error 87 from GetProxyAccount on line 604
I am trying to set up a regular SQL login which is NOT a
sysadmin with the ability to run xp_cmdshell. It's not
the best idea, but I have no choice. I granted it
execute permissions on the proc and used
xp_sqlagent_proxy_account to point to a login which is a
local admin on the server. Whenever I try to execute
xp_cmdshell under that account, I get the error :
Msg 50001, Level 1, State 50001
xpsql.cpp: Error 87 from GetProxyAccount on line 604
A search of KB and a few of these newsgroups turned up
nothing. The version number of SQL Server is 08.00.0818
(sp3 + security update).
Did you specify a proxy account? (Do this in EM, right click Agent.)
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Chris Clements" <chrisclements@.msn.com> wrote in message
news:3a0201c4a636$c892df90$a501280a@.phx.gbl...
> Error 87 from GetProxyAccount on line 604
>
> I am trying to set up a regular SQL login which is NOT a
> sysadmin with the ability to run xp_cmdshell. It's not
> the best idea, but I have no choice. I granted it
> execute permissions on the proc and used
> xp_sqlagent_proxy_account to point to a login which is a
> local admin on the server. Whenever I try to execute
> xp_cmdshell under that account, I get the error :
> Msg 50001, Level 1, State 50001
> xpsql.cpp: Error 87 from GetProxyAccount on line 604
> A search of KB and a few of these newsgroups turned up
> nothing. The version number of SQL Server is 08.00.0818
> (sp3 + security update).
>
|||Yes, I did. I posted this under the security newsgroup
and got the pointer to uncheck the "Only users with
sysadmin" checkbox...duh. Once I did that, the error
message changed to :
xpsql.c: Error 1314 from CreateProcessAsUser on line 492
I found that one in the KB though and am working out the
details now. Thanks.

>--Original Message--
>Did you specify a proxy account? (Do this in EM, right
click Agent.)
>--
>Tibor Karaszi, SQL Server MVP
>http://www.karaszi.com/sqlserver/default.asp
>http://www.solidqualitylearning.com/
>
>"Chris Clements" <chrisclements@.msn.com> wrote in
message[vbcol=seagreen]
>news:3a0201c4a636$c892df90$a501280a@.phx.gbl...
a[vbcol=seagreen]
a[vbcol=seagreen]
08.00.0818
>
>.
>
|||Yes, you need to make certain that the service account for Agent has appropriate permissions. You
can search Books Online for below string to find it as well:
"level token"
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
<anonymous@.discussions.microsoft.com> wrote in message
news:0d1e01c4a647$bca734e0$a401280a@.phx.gbl...[vbcol=seagreen]
> Yes, I did. I posted this under the security newsgroup
> and got the pointer to uncheck the "Only users with
> sysadmin" checkbox...duh. Once I did that, the error
> message changed to :
> xpsql.c: Error 1314 from CreateProcessAsUser on line 492
> I found that one in the KB though and am working out the
> details now. Thanks.
>
> click Agent.)
> message
> a
> a
> 08.00.0818

No comments:

Post a Comment