Microsoft SharePoint Server
TMA-SHAREPOINT-2.5
Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.
高レベル 1手動レビューsharepoint
説明
The SharePoint farm service account (database access account) must be configured with the minimum privileges on the SQL server Manual review.
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
In SQL Server Management Studio on the farm's SQL instance open Security > Logins > <farm service account> > Server Roles. Verify only dbcreator and securityadmin are checked (plus public). Get-SPFarm | Select DefaultServiceAccount shows the account.
修正方法
修正方法: ガイダンスまたは IaC パッチ
In SSMS > Security > Logins > farm account > Server Roles, check ONLY dbcreator and securityadmin (ALTER SERVER ROLE <role> DROP MEMBER [DOMAIN\farm] for others).
プロパティ
- オペレーティングシステム
- すべて
- タグ
- sharepointservice-accountssql
- 参照
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.5 Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.