An error occurred:

MS SQL Server 2016 Instance STIG

MS SQL Server 2016 Instance Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SQL6-D0-006300 V-213948 SQL Server must protect its audit configuration from authorized and unauthorized access and modification. Cat II
SQL6-D0-006500 V-213950 SQL Server must limit privileges to change software modules and links to software external to SQL Server. Cat II
SQL6-D0-006600 V-213951 SQL Server must limit privileges to change software modules, to include stored procedures, functions and triggers, and links to software external to SQL Server. Cat II
SQL6-D0-006700 V-213952 SQL Server software installation account must be restricted to authorized users. Cat I
SQL6-D0-006800 V-213953 Database software, including DBMS configuration files, must be stored in dedicated directories, separate from the host OS and other applications. Cat II
SQL6-D0-006900 V-213954 Default demonstration and sample databases, database objects, and applications must be removed. Cat II
SQL6-D0-007000 V-213955 Unused database components, DBMS software, and database objects must be removed. Cat II
SQL6-D0-007100 V-213956 Unused database components that are integrated in SQL Server and cannot be uninstalled must be disabled. Cat II
SQL6-D0-007200 V-213957 Access to xp_cmdshell must be disabled, unless specifically required and approved. Cat II
SQL6-D0-007300 V-213958 Access to CLR code must be disabled or restricted, unless specifically required and approved. Cat II
SQL6-D0-007400 V-213959 Access to Non-Standard extended stored procedures must be disabled or restricted, unless specifically required and approved. Cat II
SQL6-D0-007500 V-213960 Access to linked servers must be disabled or restricted, unless specifically required and approved. Cat II
SQL6-D0-007600 V-213961 SQL Server must be configured to prohibit or restrict the use of organization-defined protocols as defined in the PPSM CAL and vulnerability assessments. Cat II
SQL6-D0-007700 V-213962 SQL Server must be configured to prohibit or restrict the use of organization-defined ports, as defined in the PPSM CAL and vulnerability assessments. Cat II
SQL6-D0-007800 V-213963 SQL Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users). Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.