000036743 - Disabling xp_cmdshell or 'scan for startup procs' in SQL Server for RSA Adaptive Authentication (on Premise) 7.x

Document created by RSA Customer Support Employee on Sep 21, 2018
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000036743
Applies ToRSA Product Set: Adaptive Authentication (OnPrem)
RSA Version/Condition: 7.x
IssueCustomers query: Can we disable xp_cmdshell and 'Scan for startup procs' in MS SQL Server 2008 R2 database environment. Will disabling these have any adverse effects on RSA Adaptive Authentication (On Premise) functionality?
ResolutionWe do our certification/testing with the default SQL Server configuration. By default, the xp_cmdshell option is disabled on new installations of MS SQL Server and the default value for "scan for startup procs" is 0 (effects do not scan). So we do not anticipate any issues with AAOP functionality if this is disabled.