Re: Xp_regread

From: Drew Cooper [MSFT] (dcoop_at_online.microsoft.com)
Date: 03/31/04


Date: Tue, 30 Mar 2004 14:49:01 -0800

This question is better asked on one of the SQL security newsgroups.
microsoft.public.sqlserver.security ?

What doc said not to drop it? Was it from MSFT?

I'm not a SQL guru, but my first impulse would be to remove anything that
isn't necessary to reduce attack surface. Why risk some blackhat reading
your registry?

-- 
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Barb" <anonymous@discussions.microsoft.com> wrote in message
news:156f301c415ae$6be0e490$a101280a@phx.gbl...
> A security document recommended not dropping Xp_regread.
> It did not say why. Can someone tell me why this should
> not be dropped? Other documents suggest dropping it.
> Thanks.