Security for SQL Agent Job Execution

In this video Brian explains what security options are available when executing job from within the SQL Server Agent in SQL Server 2005 / 2008

Brian is a SQL Server author, columnist, and MVP focusing primarily on SQL Server security. He currently serves as database administrator / architect at AgFirst Farm Credit Bank where he can focus on his passion: SQL Server. He formerly served as a systems and security architect for AgFirst Farm Credit Bank where he worked on Active Directory, Windows security, VMware, and Citrix. In the technical...

siva on 12/29/2008

good

Sue Amin on 12/29/2008

Too fast for us newbies! Please make it slower next time. We do not mind few minutes more to watch this information. Many thnaks for the tips!

Dick Rosenberg on 12/29/2008

Why is this important?

Carla Wilson on 12/29/2008

Thanks for clarifying the concept of setting up proxies. We recently had to set up a proxy in order to schedule certain SSIS packages. It seemed like an unnecessary step at first, but I do appreciate it now. I didn't know you could go back to the proxy properties and see what jobs are using it.

Craig Pessano on 12/29/2008

I've set up proxy accounts to run SSIS packages from non-sysadmin accounts. This was a great explanation of how the logins and proxies work together. Thanks!

AEE49878AC on 12/30/2008

great explanation!

4B47653576 on 12/31/2008

would like to have seen how this might have worked accross servers too, i.e. linked server job.

Brendan on 1/1/2009

In just 5 minutes i learned how to constructively trigger SQL Agent Jobs securely via a proxy. I have personally been reading Google forums and trying to find out this information for some time now. Normal text based tutes are sometimes tricky to work out. This blew them all away! I have only one question about the TestLogin user? Does it need to be attached as a user in the MSDB database when running an Agent Job specific to a Database?

Pete Williams on 1/5/2009

good topic and very easy to understand.

Francis on 1/26/2009

A little too fast, otherwise excellent!

Prasanna Prabhu on 5/1/2009

Great Video. Few suggestions 1. Wish you had shown a MATRIX first of 4 things that you demoed, that will explain better 2. Displaying a DATA-FLOW Diagram can be helpful, provided you define the dependencies & pre-requisites May be I'm asking for too much, but they say "Picture Speaks 1000+ words"

Raju on 11/17/2009

Very Informative. And expects more details about proxy account.

Brendan on 3/12/2010

So what exactly is the difference between running the job via sysadmin and creating a proxy? You didn't explain that.

shahid on 6/10/2011

great stuff.

vm on 6/10/2011

nice vid

Leonard Peoples on 6/10/2011

Not sure if I'd ever need to use this, but it seems like something I should know just in case. Thanks for sharing.

Rob Ralston on 6/10/2011

Very clear, but I think it would be good to identify that the proxy acount mechanism could be abused by users and possibly execute high level OS commands which may do damage or be exploited.

Kasey Wheeler on 6/10/2011

Great video

ANITA on 6/13/2011

Very handy!

Bobby on 6/14/2011

Great job! Learned something new, thanks!

Prashant Thakwani on 6/15/2011

good as usual from Brian.

Martin Miller on 6/22/2011

Very nice overview of SQL Agent security.

Don Gilman on 6/27/2011

Shows me how dumb I am about Proxy's and overall security.

Joe Tigeleiro on 6/30/2011

excellent