Microsoft SharePoint Server
TMA-SHAREPOINT-2.5
Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.
AltaNivel 1Revisión manualsharepoint
Descripción
The SharePoint farm service account (database access account) must be configured with the minimum privileges on the SQL server Manual review.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
In SQL Server Management Studio on the farm's SQL instance open Security > Logins > <farm service account> > Server Roles. Verify only dbcreator and securityadmin are checked (plus public). Get-SPFarm | Select DefaultServiceAccount shows the account.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
In SSMS > Security > Logins > farm account > Server Roles, check ONLY dbcreator and securityadmin (ALTER SERVER ROLE <role> DROP MEMBER [DOMAIN\farm] for others).
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- sharepointservice-accountssql
- Referencia
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.5 Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.