Also considered VBScript and .net CLR options as well. We aren't using much of that within our databases proper; more with our web applications. So the xp_cmdshell may not be...

--Turn it on, run the command, turn it back off. That keeps it secure.

Yup, that's the solution we've used. We also are using xp_cmdshell in part of our automated...