TMA-MSSQL-1.2
Ensure Single-Function Member Servers are Used
说明
It is recommended that SQL Server software be installed on a dedicated server. This architectural consideration affords security flexibility in that the database server can be placed on a separate subnet allowing access only from particular hosts and over particular protocols. Degrees of availability are easier to achieve as well - over time, an enterprise can move from a single database server to a failover to a cluster using load balancing ...
检查方式
审计方法: 人工审核
此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。
Ensure that no other roles are enabled for the underlying operating system and that no excess tooling is installed, per enterprise policy.
修复方式
修复方法: 操作指南或基础设施补丁
Uninstall excess tooling and/or remove unnecessary roles from the underlying operating system.
属性
- 操作系统
- 任意
- 标签
- mssqldatabasemanual
- 参考
- CIS Microsoft SQL Server 2025 Benchmark v1.0.0 - 1.2 Ensure Single-Function Member Servers are Used