TMA-MSSQL-1.2
Ensure Single-Function Member Servers are Used
Description
It is recommended that SQL Server software be installed on a dedicated server. This architectural consideration affords security flexibility in that the database server can be placed on a separate subnet allowing access only from particular hosts and over particular protocols. Degrees of availability are easier to achieve as well - over time, an enterprise can move from a single database server to a failover to a cluster using load balancing ...
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Ensure that no other roles are enabled for the underlying operating system and that no excess tooling is installed, per enterprise policy.
How it is fixed
Fix method: Guidance or infrastructure patch
Uninstall excess tooling and/or remove unnecessary roles from the underlying operating system.
Properties
- Operating systems
- Any
- Tags
- mssqldatabasemanual
- Reference
- CIS Microsoft SQL Server 2025 Benchmark v1.0.0 - 1.2 Ensure Single-Function Member Servers are Used