How to Restrict CmdExec access to the Sysadmin role

I came across a security warning from Microsoft Baseline Analyzer as it was checking out the security posture of a SQL deployment. It highlighted the need for me to “Restrict CmdExec access to Sysadmin”. For the life of me, I didnt know how to do this, and a quick search didnt show any relevant results. […]