|
|
|
Forum Newbie
Group: General Forum Members
Last Login: Monday, November 09, 2009 2:49 PM
Points: 1,
Visits: 5
|
|
Hi All,
I had a question regarding disabling extended stored procedures for security purposes in SQL Server 2005. For example, if I want to disable "xp_regread" I tried the following command:
sp_configure 'show advanced options', 1;
GO
RECONFIGURE;
GO
exec sp_configure 'xp_regread', 0;
GO
RECONFIGURE;
GO
However, I get the following error message: "Msg 15123, Level 16, State 1, Procedure sp_configure, Line 51
The configuration option 'xp_regread' does not exist, or it may be an advanced option."
Does anyone know why this is happening and is there a different method I should use to disable extended stored procedures? This is the only method that I've been able to find online.
Is there even a way to disable XP's or do you have to delete them?
Thanks for any insight in advance,
Gregg
|
|
|
|
|
SSCarpal Tunnel
Group: General Forum Members
Last Login: Today @ 3:28 AM
Points: 4,977,
Visits: 3,926
|
|
- "exec sp_configure " will show all available configuration parameters.
Keep in mind you may need to activate "show advanced options" to get to see all parameters !
- Check books online for "DENY Object Permissions ".
e.g. You can deny execute of xp_reg.. to public.
 Don't drive faster than your guardian angel can fly ...
but keeping both feet on the ground won't get you anywhere 
Very usefull HowTo for forums:
- How to post Performance Problems
- How to post data/code to get the best help
|
|
|
|
|
Hall of Fame
Group: General Forum Members
Last Login: 2 days ago @ 8:28 AM
Points: 3,695,
Visits: 2,957
|
|
Gregg,
as already said before you cannot disable xp_regread through sp_configure. While sp_configure works for xp_cmdshell, most others you can only deny execution rights to your users.
But I have to warn you to be very carefull with that. The system might need them to get some metadata and configuration settings. For example then you want to create a new database SQL server uses xp_instance_regread to find the default data directory.
Markus Bohse
MCT, MCSE, MCDBA, MCITP Admin & Development
|
|
|
|
