Microsoft SharePoint Server
TMA-SHAREPOINT-2.5
Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.
TinggiLevel 1Tinjauan manualsharepoint
Deskripsi
The SharePoint farm service account (database access account) must be configured with the minimum privileges on the SQL server Manual review.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
In SQL Server Management Studio on the farm's SQL instance open Security > Logins > <farm service account> > Server Roles. Verify only dbcreator and securityadmin are checked (plus public). Get-SPFarm | Select DefaultServiceAccount shows the account.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
In SSMS > Security > Logins > farm account > Server Roles, check ONLY dbcreator and securityadmin (ALTER SERVER ROLE <role> DROP MEMBER [DOMAIN\farm] for others).
Properti
- Sistem operasi
- Apa saja
- Tag
- sharepointservice-accountssql
- Referensi
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.5 Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.