Microsoft SharePoint Server
TMA-SHAREPOINT-2.5
Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.
ÉlevéeNiveau 1Revue manuellesharepoint
Description
The SharePoint farm service account (database access account) must be configured with the minimum privileges on the SQL server Manual review.
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
In SQL Server Management Studio on the farm's SQL instance open Security > Logins > <farm service account> > Server Roles. Verify only dbcreator and securityadmin are checked (plus public). Get-SPFarm | Select DefaultServiceAccount shows the account.
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
In SSMS > Security > Logins > farm account > Server Roles, check ONLY dbcreator and securityadmin (ALTER SERVER ROLE <role> DROP MEMBER [DOMAIN\farm] for others).
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- sharepointservice-accountssql
- Référence
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.5 Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.