Ensure the SharePoint setup account is configured with the minimum privileges on the SQL server.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

In SQL Server Management Studio on the farm's SQL instance open Security > Logins > <SharePoint setup account> > Server Roles. Verify only dbcreator and securityadmin are checked (plus public). sysadmin or other roles are non-compliant.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

In SSMS > Security > Logins > setup account > Server Roles, check only dbcreator and securityadmin (ALTER SERVER ROLE <role> DROP MEMBER [DOMAIN\setup] for others).