Per auditor's requests, at our site we are going through and removing the use xp_cmdshell completely.

Some of the changes to replace the use of xp_cmdshell have involved a fair amount of processing code changes, but we've been able to find a way to get the same work done and not use this sp.