SQL Server blocks access to procedure sys.sp_OAGetProperty

In some environments, the following error may be displayed in the SQL Server error log:

About this task


SQL Server blocked access to procedure 'sys.sp_OAGetProperty' of component 
'Ole Automation Procedures' because this component is turned off as part of 
the security configuration for this server. A system administrator can 
enable the use of 'Ole Automation Procedures' by using sp_configure. 
For more information about enabling 'Ole Automation Procedures', 
see "Surface Area Configuration" in SQL Server Books Online.

sys.sp_OAGetProperty is an automation procedure that allows access to system details. Discover uses this stored procedure to acquire details on disk space.

Note: If access to the sys.sp_OAGetProperty procedure is not enabled:
  1. The Database Filegroup Size and Database Table Size reports in the Portal do not contain free space and unused space information.
  2. Available disk space on SQL Server is not recorded and does not appear in the Discover Event Log.

The error message is harmless. However, to avoid confusion, you may want to deny access to pr_ServerDiskSpace, which uses this stored procedure. When access is denied, error messages are reported from pr_ServerDiskSpace, instead of sys.sp_OAGetProperty. Error messages from the latter procedure may suggest possible hacks or malicious software, so unnecessary messages should be suppressed.

To deny access, run the following through SQL Server Management Studio:


use DC_STATISTICS
go
Deny execute on pr_ServerDiskSpace to DCADMIN;
Deny execute on pr_ServerDiskSpace to TLUser;

go
Deny execute on pr_ServerDiskSpace to DCADMIN;
Deny execute on pr_ServerDiskSpace to TLUser