STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SQL Server software installation account must be restricted to authorized users.

DISA Rule

SV-271286r1108474_rule

Vulnerability Number

V-271286

Group Title

SRG-APP-000133-DB-000198

Rule Version

SQLI-22-006700

Severity

CAT I

CCI(s)

• CCI-001499 - Limit privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

From a command prompt, open lusrmgr.msc. Navigate to "Users" and right-click "Individual User". Select "Properties", then "Member Of".

Configure SQL Server and OS settings and access controls to restrict user access to objects and data that the user is authorized to view/use.

Check Contents

From the system documentation, obtain the list of accounts authorized to install/update SQL Server. Run the following PowerShell command to list all users who have installed/modified SQL Server 2022 software and compare the list against those persons who are qualified and authorized to use the software.

sl "C:\Program files\Microsoft SQL Server\160\Setup Bootstrap\Log"
Get-ChildItem -Recurse | Select-String -Pattern "LogonUser = "

If any accounts are shown that are not authorized in the system documentation, this is a finding.

Vulnerability Number

V-271286

Documentable

False

Rule Version

SQLI-22-006700

Severity Override Guidance

From the system documentation, obtain the list of accounts authorized to install/update SQL Server. Run the following PowerShell command to list all users who have installed/modified SQL Server 2022 software and compare the list against those persons who are qualified and authorized to use the software.

sl "C:\Program files\Microsoft SQL Server\160\Setup Bootstrap\Log"
Get-ChildItem -Recurse | Select-String -Pattern "LogonUser = "

If any accounts are shown that are not authorized in the system documentation, this is a finding.

Check Content Reference

M

Target Key

5677