关于MSSQL安全配置方法指南

关于MSSQL安全配置方法指南删除有安全隐患的扩展: exec sp_dropextendedproc 'xp_cmdshell' [删除此项扩展后,将无法远程连接数据库] exec sp_dropextendedproc 'xp_dirtree' [删除此项扩展后,将无法新建或附加数据库] exec sp_dropextendedproc 'xp_enumgroups' exec sp_dropextendedproc 'xp_fixeddrives' exec sp_dropextendedproc 'xp_loginconfig' exec sp_dropextendedproc 'xp_regaddmultistring' exec sp_dropextendedproc 'xp_regdeletekey' exec sp_dropextendedproc 'xp_regdeletevalue' exec sp_dropextendedproc 'xp_regread' exec sp_dropextendedproc 'xp_regremovemultistring' exec sp_dropextendedproc 'xp_regwrite' exec sp_dropextendedproc 'xp_enumerrorlogs' exec sp_dropextendedproc 'xp_getfiledetails' exec sp_dropextendedproc 'xp_regenumvalues' 恢复扩展 exec sp_addextendedproc 'xp_cmdshell', 'xplog70.dll' exec sp_addextendedproc 'xp_dirtree', 'xpstar.dll' exec sp_addextendedproc 'xp_enumgroups', 'xplog70.dll' exec sp_addextendedproc 'xp_fixeddrives', 'xpstar.dll' exec sp_addextendedproc 'xp_loginconfig', 'xplog70.dll' exec sp_addextendedproc 'xp_regaddmultistring', 'xpstar.dll' exec sp_addextendedproc 'xp_regdeletekey', 'xpstar.dll' exec sp_addextendedproc 'xp_regdeletevalue', 'xpstar.dll' exec sp_addextendedproc 'xp_regread', 'xpstar.dll' exec sp_addextendedproc 'xp_regremovemultistring', 'xpstar.dll' exec sp_addextendedproc 'xp_regwrite', 'xpstar.dll' exec sp_addextendedproc 'xp_enumerrorlogs', 'xpstar.dll' exec sp_addextendedproc 'xp_getfiledetails', 'xpstar.dll' exec sp_addextendedproc 'xp_regenumvalues', 'xpstar.dll'全部复制到"SQL查询分析器"点击菜单上的--"查询"--"执行"，就会将有安全问题的SQL过程删除更改默认SA空密码.数据库链接不要使用SA帐户.单数据库单独设使用帐户.只给public和db_owner权限.