sp_xp_cmdshell_proxy_account - group managed service account

agepeder 271 Reputation points
2021-01-19T19:50:32.49+00:00

Hi,

I would like to configure sp_xp_cmdshell_proxy_account using a group managed service account.

My searching have lead me to this thread that describes SQL server 2014:
https://dba.stackexchange.com/questions/187893/sql-server-2014-using-gmsa-for-xp-cmdshell-proxy-account

Now - has the status changed for SQL server 2017 / 2019 ?

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
12,937 questions
0 comments No comments
{count} votes

Accepted answer
  1. Sean Gallardy - MSFT 1,886 Reputation points Microsoft Employee
    2021-01-20T02:26:41.473+00:00

    I'm the same person who wrote that answer, the status has not changed.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. AmeliaGu-MSFT 13,961 Reputation points Microsoft Vendor
    2021-01-20T05:27:21.96+00:00

    Hi @agepeder ,
    Based on my test, it seems we still cannot use a gMSA as the proxy account for xp_cmdshell in SQL Server 2017/2019 as SeanGallardy mentioned. With gMSAs, the password is managed by either the server using the account or by the AD DCs themselves. But the sp_xp_cmdshell_proxy_account is required to specify a Windows login and Password.

    58365-03.jpg

    I recommend you submit it to the Microsoft feedback at this link https://feedback.azure.com/forums/908035-sql-server. Your feedback is valuable for Microsoft to improve the level of products and service. Appreciate for your understanding.
    Best Regards,
    Amelia


    If the answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments