TMA-MSSQL-2.7
Ensure 'Remote Admin Connections' Server Configuration Option is set to '0'
MediaNivel 1Automatizadamssql
Descripción
The remote admin connections option controls whether a client application on a remote computer can use the Dedicated Administrator Connection (DAC). Clustered instances are not applicable and are reported compliant. Default: By default, this option is disabled (0), only local connections may use the DAC. Runs one sqlcmd query with its defaults (Windows authentication to the local default instance); set SQLCMDSERVER, SQLCMDUSER and SQLCMDPASSWORD for another instance or SQL authentication. Needs VIEW SERVER STATE / sysadmin-level read access.
Cómo se verifica
Método de auditoría: Consulta SQL
sql_query
sqlcmd -b -h -1 -W -Q "SET NOCOUNT ON; SELECT CASE WHEN CAST(SERVERPROPERTY('IsClustered') AS int) = 1 THEN 'compliant' WHEN EXISTS (SELECT 1 FROM sys.configurations WHERE name = 'remote admin connections' AND CAST(value AS int) = 0 AND CAST(value_in_use AS int) = 0) THEN 'compliant' ELSE 'noncompliant' END;"- Salida esperada
compliant
Cómo se corrige
Método de corrección: Sentencia SQL
shell
sqlcmd -b -h -1 -W -Q "SET NOCOUNT ON; EXEC sp_configure 'remote admin connections', 0; RECONFIGURE;"Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- mssqldatabasesurface-areadac
- Referencia
- CIS Microsoft SQL Server 2025 Benchmark v1.0.0 - 2.7 Ensure 'Remote Admin Connections' Server Configuration Option is set to '0'
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
shell
tmaegis scan --target mssql