Mistake: treating a SQL Server installation script as sufficient. Scripts create consistency at build time, but later changes can introduce configuration drift. Desired State Configuration (DSC) describes the state a server should maintain and periodically evaluates whether reality still matches it. section 8.11 section 8.9
A DSC resource manages one configuration area, such as a registry key, folder, or software installation. Its test method checks the current state; its set method corrects the state when drift is found. A manifest combines resources and supplies their desired values. section 8.9
Disabling xp_cmdshell across SQL Server instances
A single DSC configuration can target multiple SQL Server hosts. During each evaluation, the test function checks whether xp_cmdshell is disabled. A compliant instance is left alone; an instance with the feature enabled receives the set action. With evaluation every 30 minutes, a misconfiguration is automatically corrected within zero to 30 minutes. section 8.9
The safer practice is to manage SQL Server for its full application lifecycle, not only its initial build. Configuration management reduces administrative overhead, supports security compliance, and helps prevent a server estate from silently diverging. section 8.11
