xp_cmdshell can be a safe and useful thing to turn on.

Don't create a proxy account and don't grant anyone into SA that shouldn't be.

wow... that was easy.

and the first person that says that people can elevate priviliges to sa through sql injection or buffer overflows is going to get one of these: :doze: