This is the SP that will actually run stuff in the OS with the same permissions the SQL Server has. Since that is considered a security vulnerability it is turned off by default in SQL 2005. You use the Surface Configuration Tool (on the Windows menu for SQL Server\Configuration) to turn it on for the server (not sure how you do it in SQL 2000 and prior)
>>>>>I think that xp_cmdshell is contained in the Master database, but if I don't see that database in my SQL Server Management Studio, what do I need to do?
>>>>
>>>>Look under Databases/system databases
>>>
>>>Ok, I found this tree:
>>>
>>>
>>>NTSERVER
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>Where do I find the xp_cmdshell? There are other branches, like Views, Synonums, etc. but I didn't see that in them.
>>
>>Under Master, look at Programmability/Extended stored Procedures/system Extended Stored Procedures
>
>It has a sys prefix. It is dbo in the script I inherited. Does that matter?
Charles Hankey
Though a good deal is too strange to be believed, nothing is too strange to have happened.
- Thomas Hardy
Half the harm that is done in this world is due to people who want to feel important. They don't mean to do harm-- but the harm does not interest them. Or they do not see it, or they justify it because they are absorbed in the endless struggle to think well of themselves.
-- T. S. Eliot
Democracy is two wolves and a sheep voting on what to have for lunch.
Liberty is a well-armed sheep contesting the vote.
- Ben Franklin
Pardon him, Theodotus. He is a barbarian, and thinks that the customs of his tribe and island are the laws of nature.
