xp_cmdshell: Is this required?
Yes, as a rule of thumb we say that for security reasons there is no need to actually have the extended SP. But more often than not the complete analysis needs to be done. This KB article describes in detail the effects of removing xp_cmdshell and the dependencies that need to be taken care. I would rate this as a good read ... Do take a minute to go over this ...