Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

How do you grant a user xp_cmdshell, sp_OACreate, sp_OAmethod, and sp_Destroy on SQL server 2008? What is the prons and cons of granting this permission? Please let me know. Thank you!

share|improve this question
add comment

2 Answers

Instead you should consider using SQLCLR as some of the ones you listed are notorious for memory issues + security issues as well.

Note that you can also shoot yourself in the foot with SQLCLR but I am NOT qualified to speak abt it.

share|improve this answer
    
Agree. sp_OA% have so many issues... –  gbn May 17 '11 at 7:02
add comment

All those 4 procedures require the sysadmin fixed server role or CONTROL SERVER permission. What are the pros and cons of granting this level of permission to a user that's not a DBA? This is like opening Pandora's box :-).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.