Ensure 'SQL Server Browser Service' is configured correctly

LowLevel 1Manual reviewmssql

Description

No recommendation is being given on disabling the SQL Server Browser service. In the case of a default instance installation, the SQL Server Browser service is disabled by default. Unless there is a named instance on the same server, there is typically no reason for the SQL Server Browser service to be running. In this case it is strongly suggested that the SQL Server Browser service remain disabled. When it comes to named instances, given that a security scan can fingerprint a SQL Server listening on any port, it's therefore of limited benefit to disable the SQL Server Browser service. However, if all connections against the named instance are via applications and are not visible to end users, then configuring the named instance to listening on a static port, disabling the SQL Server Browser service, and configuring the apps to connect to the specified port should be the direction ta...

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Check the SQL Browser service's status via services.msc or similar methods.

How it is fixed

Fix method: Guidance or infrastructure patch

Enable or disable the service as needed for your environment.

Properties

Operating systems: Any
Tags: mssqlsqlserver-2022
Reference: CIS Microsoft SQL Server 2022 Benchmark v1.3.0 - 8.1 Ensure 'SQL Server Browser Service' is configured correctly