Microsoft SharePoint Server
TMA-SHAREPOINT-2.5
Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.
ВисокаНиво 1Ручни прегледsharepoint
Опис
The SharePoint farm service account (database access account) must be configured with the minimum privileges on the SQL server Manual review.
Како се проверава
Метод провере: Ручни преглед
Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.
In SQL Server Management Studio on the farm's SQL instance open Security > Logins > <farm service account> > Server Roles. Verify only dbcreator and securityadmin are checked (plus public). Get-SPFarm | Select DefaultServiceAccount shows the account.
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
In SSMS > Security > Logins > farm account > Server Roles, check ONLY dbcreator and securityadmin (ALTER SERVER ROLE <role> DROP MEMBER [DOMAIN\farm] for others).
Својства
- Оперативни системи
- Било који
- Ознаке
- sharepointservice-accountssql
- Референца
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.5 Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.