STIGQter STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

Windows must enforce access restrictions associated with changes to the configuration of the SQL Server instance.

DISA Rule

SV-271349r1108938_rule

Vulnerability Number

V-271349

Group Title

SRG-APP-000380-DB-000360

Rule Version

SQLI-22-011500

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Remove users from the local Administrators group who are not authorized.

Check Contents

Obtain a list of users who have privileged access to the server via the local administrators group.

1. Launch lusrmgr.msc.
2. Select "Groups".
3. Double-click "Administrators".

Alternatively, execute the following command in PowerShell:

net localgroup administrators

Check the server documentation to verify the users returned are authorized.

If the users are not documented and authorized, this is a finding.

Vulnerability Number

V-271349

Documentable

False

Rule Version

SQLI-22-011500

Severity Override Guidance

Obtain a list of users who have privileged access to the server via the local administrators group.

1. Launch lusrmgr.msc.
2. Select "Groups".
3. Double-click "Administrators".

Alternatively, execute the following command in PowerShell:

net localgroup administrators

Check the server documentation to verify the users returned are authorized.

If the users are not documented and authorized, this is a finding.

Check Content Reference

M

Target Key

5677