SQL Server blocks access to procedure sys.sp_OAGetProperty
In some environments, the following error may be displayed in the SQL Server error log:
About this task
SQL Server blocked access to procedure 'sys.sp_OAGetProperty' of component
'Ole Automation Procedures' because this component is turned off as part of
the security configuration for this server. A system administrator can
enable the use of 'Ole Automation Procedures' by using sp_configure.
For more information about enabling 'Ole Automation Procedures',
see "Surface Area Configuration" in SQL Server Books Online.
sys.sp_OAGetProperty
is an automation
procedure that allows access to system details. Discover uses this stored procedure to acquire
details on disk space.
Note: If access to the
sys.sp_OAGetProperty
procedure
is not enabled: - The Database Filegroup Size and Database Table Size reports in the Portal do not contain free space and unused space information.
- Available disk space on SQL Server is not recorded and does not appear in the Discover Event Log.
The error message is harmless. However, to avoid confusion,
you may want to deny access to pr_ServerDiskSpace
,
which uses this stored procedure. When access is denied, error messages
are reported from pr_ServerDiskSpace
, instead of sys.sp_OAGetProperty
.
Error messages from the latter procedure may suggest possible hacks
or malicious software, so unnecessary messages should be suppressed.
To deny access, run the following through SQL Server Management Studio:
use DC_STATISTICS
go
Deny execute on pr_ServerDiskSpace to DCADMIN;
Deny execute on pr_ServerDiskSpace to TLUser;
go
Deny execute on pr_ServerDiskSpace to DCADMIN;
Deny execute on pr_ServerDiskSpace to TLUser