Improve SQL server security by disabling xp_cmdshell

When a hacker attacks SQL Server, the first method is to execute the xp_mongoshell command to destroy the database. To ensure database security, it is best to disable xp_mongoshell.

Xp_cmdshell allows the system administrator to execute a given command string in the form of an operating system command line interpreter and return any output in the form of text lines. It is a powerful extended storage process.

In general, xp_mongoshell is unnecessary for administrators. The elimination of xp_mongoshell will not affect the server.

You can remove xp_cmdshell:

Use master

Exec sp_dropextendedproc n 'xp _ export shell'

Go

If necessary, you can restore xp_mongoshell back:

Use master

Exec sp_addextendedproc n 'xp _ cmdshell', n'xp log70. dll'

Go

It is best to eliminate the xp_mongoshell storage process of the server.