I don't have it in the context of an escalation, but if they can get the database to make a new stored procedure, http://www.mssqltips.com/sqlservertip/1263/ac

I don't have it in the context of an escalation, but if they can get the database to make a new stored procedure, http://www.mssqltips.com/sqlservertip/1263/accessing-the-windows-file-system-from-sql-server/ http://www.mssqltips.com/sqlservertip/1263/accessing-the-win... then they can usually do a very large amount of things