SQL Server 2005 - Disable Extended Stored Procedure

  • Hi All,

    I had a question regarding disabling extended stored procedures for security purposes in SQL Server 2005. For example, if I want to disable "xp_regread" I tried the following command:

    sp_configure 'show advanced options', 1;

    GO

    RECONFIGURE;

    GO

    exec sp_configure 'xp_regread', 0;

    GO

    RECONFIGURE;

    GO

    However, I get the following error message: "Msg 15123, Level 16, State 1, Procedure sp_configure, Line 51

    The configuration option 'xp_regread' does not exist, or it may be an advanced option."

    Does anyone know why this is happening and is there a different method I should use to disable extended stored procedures? This is the only method that I've been able to find online.

    Is there even a way to disable XP's or do you have to delete them?

    Thanks for any insight in advance,

    Gregg

  • - "exec sp_configure " will show all available configuration parameters.

    Keep in mind you may need to activate "show advanced options" to get to see all parameters !

    - Check books online for "DENY Object Permissions ".

    e.g. You can deny execute of xp_reg.. to public.

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

  • Gregg,

    as already said before you cannot disable xp_regread through sp_configure. While sp_configure works for xp_cmdshell, most others you can only deny execution rights to your users.

    But I have to warn you to be very carefull with that. The system might need them to get some metadata and configuration settings. For example then you want to create a new database SQL server uses xp_instance_regread to find the default data directory.

    [font="Verdana"]Markus Bohse[/font]

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply