If your code assumes xp_cmdshell is on and when you find it isnt, you turn it on...you're a security risk (& a hack)