Setting the value of the xp_cmdshell server configuration option to 0
The xp_cmdshell option controls whether the xp_cmdshell extended stored procedure can be used by an authenticated SQL Server user to execute the operating-system command shell commands and return results as rows within the SQL client.
To se the value of the xp_cmdshell option to 0, run this T-SQL command on the IRC and the CM database:
EXECUTE sp_configure 'show advanced options', 1;
RECONFIGURE;
EXECUTE sp_configure 'xp_cmdshell', 0;
RECONFIGURE;
GO
EXECUTE sp_configure 'show advanced options', 0;RECONFIGURE;