UNKNOWN ISSUE

Question

Dear All,
The below SP is running fine for months , now we have a requirement to change ABCDEFdba to ABCDdba. After making the change the stored procedure failes with Message ACCESS DENIED(this error is actually from xp_cmdshell'). We spent quite sometime
to understand why its failing but no luck , so we reverted back the change and stored procedure started running fine.
CREATE PROCEDURE [dbo].[DBA_usp_WriteToEventLog] (@SMS varchar(8000), @EventID Varchar(5))
AS
BEGIN
  DECLARE @cmd varchar(8000);
  select @SMS = @SMS + ' Document Link' + @EventID
  SET @cmd = 'eventcreate  /t error /id
'+@EventID+' /l application /SO ABCDEFdba /d "'+@SMS+'"'
  print @cmd
  EXEC master..xp_cmdshell @cmd;
END
Mohd Sufian www.sqlship.wordpress.com Please mark the post as Answered if it helped.

Answer 1

Hi Mohammad,
When the
xp_cmdshell extended stored procedure is executed by a member of the sysadmin fixed server role, the Windows
process of the command shell runs with the security context of the Windows service account of SQL Server.
please check and ensure the user "ABCDdba" is sysadmin or not.
If not a sysadmin role, please refer to the following articles to create a SQL Server proxy account to run xp_cmdshell:
http://www.mssqltips.com/sqlservertip/2143/creating-a-sql-server-proxy-account-to-run-xpcmdshell/
Xp_cmdshell and permissions:
http://sqlblog.com/blogs/tibor_karaszi/archive/2007/08/23/xp-cmdshell-and-permissions.aspx
If you have any feedback on our support, please click
here. 
Elvis Long
TechNet Community Support