The EXECUTE permission was denied on the object 'xp_cmdshell', database 'mssqlsystemresource', schema 'sys'.
--Run as login x EXECUTE AS login = 'userx' --Below fails, no execute permission on xp_cmdshell EXEC xp_cmdshell 'DIR C:\*.*' REVERT GO
use master --Note, we are in the master database!!! GRANT EXECUTE ON xp_cmdshell TO userx
--Try again EXECUTE AS login = 'userx' --Execution of xp_cmdshell is allowed. --But I haven't configured the proxy account... EXEC xp_cmdshell 'DIR C:\*.*' REVERT GO
--3, specify the proxy account for non-syadmins --Replace obvious parts! EXEC sp_xp_cmdshell_proxy_account 'COMPANYDC\administrator','**********' EXECUTE AS login = 'userx' --Execution of xp_cmdshell is allowed. --And executes successfully!!! EXEC xp_cmdshell 'DIR C:\*.*' REVERT















