Earlier versions of Adaptive Server for Windows NT restricted who could execute xp_cmdshell. If the xp_cmdshell context parameter was set to 1, Adaptive Server looked up account information based on the user ID making the RPC connection. Adaptive Server allowed this user to run a command only if he or she was a member of the NT administrators group.
The values for xp_cmdshell context configuration parameter have changed to:
0 – operating system command runs under XP_Server’s account.
1 – operating system command runs under user’s own account.
2 – operating system command runs under XP_Server’s account only if user has system administrator privileges.
| Copyright © 2004. Sybase Inc. All rights reserved. |
|
|
