SQL 2005 Express and template.ini

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

User - 28 Nov 2006 17:18 GMT

How to enable "xp_cmdshell" on unattended installation using "tamplate.ini"?

Reply to this Message

Arnie Rowland - 28 Nov 2006 17:36 GMT

That is such an amazing concept, I just can't imagine why you would be
taking such a foolhardy risk.

Signature

Arnie Rowland, Ph.D.
Westwood Consulting, Inc

Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous

You can't help someone get up a hill without getting a little closer to the
top yourself.
- H. Norman Schwarzkopf

> How to enable "xp_cmdshell" on unattended installation using
> "tamplate.ini"?

Reply to this Message

User - 28 Nov 2006 18:06 GMT

Not a risk! I only need to use "xp_cmdshell"!
Use this sp is a risk??

Anyone have the answer, not comment, to my problem?
Very tnx.

> That is such an amazing concept, I just can't imagine why you would be
> taking such a foolhardy risk.
>
> > How to enable "xp_cmdshell" on unattended installation using
> > "tamplate.ini"?

Reply to this Message

Arnie Rowland - 28 Nov 2006 18:11 GMT

It is a major security risk.

I would never give users unconditional access to using xp_cmdshell. In fact,
in their 'Best Practices' white paper, Microsoft recommends that xp_cmdshell
be removed from production servers.

Signature

> Not a risk! I only need to use "xp_cmdshell"!
> Use this sp is a risk??
[quoted text clipped - 11 lines]
>> > How to enable "xp_cmdshell" on unattended installation using
>> > "tamplate.ini"?

Reply to this Message