question

Saransvan-0628 avatar image
0 Votes"
Saransvan-0628 asked Saransvan-0628 commented

Adding or Deleting a Login Fails with xp_cmdshell Error

I have such a weird issue. I have a brand new SQL2019 FCI with CU9 and I can't add or delete logins without having xp_cmdshell enabled. If it isn't I get this error when trying to delete/add/disable etc a login:-

SQL Server blocked access to procedure 'sys.xp_cmdshell' of component 'xp_cmdshell' because this component is turned off as part of the security configuration for this server. A system administrator can enable the use of 'xp_cmdshell' by using sp_configure. For more information about enabling 'xp_cmdshell', search for 'xp_cmdshell' in SQL Server Books Online.

Why does login admin activity need xp_cmdshell enabled?

sql-server-general
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Spot on. Thankyou!

0 Votes 0 ·

1 Answer

TomPhillips-1744 avatar image
0 Votes"
TomPhillips-1744 answered

What you describe is almost certainly due to someone creating a DDL trigger which requires xp_cmdshell.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.