Previous SQL Server Administration xp_cmdshell Proxy Account Next

SQL Server Proxy Accounts

SQL Server proxy accounts are only required if users without sysadmin rights need to perform certain tasks.

There are two types of proxy account. The configuration required by each type of proxy is different, and the way the authorities they give are used is different.

Users who have sysadmin rights do not need to have any proxies defined for the jobs they run or for xp_cmdshell. Jobs owned by users with sysadmin rights will always run under the security context of the SQL Agent service account, with the exception of any use of xp_cmdshell. Any use of xp_cmdshell by a user with sysadmin rights will always run under the security context of the SQL Server service account.

Proxy Type Description
xp_cmdshell Proxy Account Required where users without sysadmin rights need to run xp_cmdshell
SQL Agent Job Proxy Accounts Required where users without sysadmin rights need to own SQL Agent jobs

The Change Proxy Account password process must be used to change the password of any type of SQL Server Proxy Account.

Copyright © 2012 - 2013 Edward Vassie. License and Acknowledgements
Previous SQL Server Administration Top xp_cmdshell Proxy Account Next

Last edited May 23, 2013 at 2:58 PM by EdVassie, version 8