Jeff Moden (11/5/2013)
SQLRNNR (11/5/2013)
Jeff Moden (11/5/2013)
Heh... I had to think about it. For me, the correct answer would have started with "Exec xp_CmdShell". 😀not sp_configure??
:w00t::-D
Heck no. I leave xp_CmdShell on all the time. There's no security advantage to turning it off.
Sorry, I was lead back here looking for another previous post. Your statement requires qualification Jeff.
Maybe in some environments that is true enough, obviosuly it is in your environment and fo ryou, but in general you're statement is incorrect. Having xp_cmdshell enabled reduces the overall security and auditability of an instance.
There are no special teachers of virtue, because virtue is taught by the whole community.
--Plato