SQL Server 2005: Can't drop xp_cmdshell > Discussions

September 10, 2010 Login |

Home
FAQs
       SQL Server FAQ
       SQL Injection FAQ
       SQL Security Checklist
       SQL Server-Related Products
       SQL Server/MSDE-Based Applications
       SQL Server Version Database
Tools
       Lockdown Script
       Free Tools
       Free Analysis
       Group Policy Templates
       Commercial Tools
Community
       Discussions
       Links
About
Search

SQL Security Forums

Note: SQLSecurity.com does not allow nor require registration due to privacy concerns for users. SQLSecurity.com is open and anonymous for all. Please report any abuse or profanity.

Unanswered

Active Topics

Forums

Forums > Discussions > SQL Server Security

Subject: SQL Server 2005: Can't drop xp_cmdshell

Prev Next

Add Reply

Author

Messages

CeeS (guest)

08/23/2006 2:53 PM	Quote Reply Alert
xp_cmdshell is internal to the SQL server process (as opposed to being linked to a DLL), and therefore cannot be dropped or modified. So... I can't get rid of it completely, right? SQL Server 2000 allowed you to drop it and delete the dll it was linked to, but 2k5 doesn't. Am I missing something here? I know I can keep it off by default, but I would love to prevent even the SA from re-enabling it. C

Add Reply

Forums > Discussions > SQL Server Security > SQL Server 2005: Can't drop xp_cmdshell

Quick Reply

Username:
Subject:
Body:

ActiveForums 3.6