STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

The SQL Server Replication Xps feature must be disabled unless specifically required and approved.

DISA Rule

SV-271292r1111143_rule

Vulnerability Number

V-271292

Group Title

SRG-APP-000141-DB-000092

Rule Version

SQLI-22-017900

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Disable use of or remove any external application executable object definitions that are not approved.

To disable the use of [Replication Xps] option, from the query prompt:
EXEC SP_CONFIGURE 'show advanced options', 1;
RECONFIGURE WITH OVERRIDE;
EXEC SP_CONFIGURE 'replication xps', 0;
RECONFIGURE WITH OVERRIDE;
EXEC SP_CONFIGURE 'show advanced options', 0;
RECONFIGURE WITH OVERRIDE;
GO
RECONFIGURE;
GO

Check Contents

To determine if [Replication Xps] is enabled, execute the following command:
SELECT name, value, value_in_use
FROM sys.configurations
WHERE name = 'Replication Xps'

If [value_in_use] is a [1], review the system documentation to determine whether the use of [Replication Xps] is approved. If it is not approved, this is a finding.

Vulnerability Number

V-271292

Documentable

False

Rule Version

SQLI-22-017900

Severity Override Guidance

To determine if [Replication Xps] is enabled, execute the following command:
SELECT name, value, value_in_use
FROM sys.configurations
WHERE name = 'Replication Xps'

If [value_in_use] is a [1], review the system documentation to determine whether the use of [Replication Xps] is approved. If it is not approved, this is a finding.

Check Content Reference

M

Target Key

5677