Page History
The xp_cmdshell extended stored procedure allows a Windows shell command to be executed from within a SQL Server connection. This command can be used for malicious purposes and is disabled by default in SQL Server. If the command is not being used, or if the use of the command can be eliminated, you can disable xp_cmdshell with this command:
...