STIGQter: STIG Summary: Microsoft SQL Server 2022 Instance Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SQL Server must configure Customer Feedback and Error Reporting.

DISA Rule

SV-271389r1109133_rule

Vulnerability Number

V-271389

Group Title

SRG-APP-000516-DB-000363

Rule Version

SQLI-22-016000

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

To disable participation in the CEIP program, change the value of the following registry keys to "0".

To enable participation in the CEIP program, change the value of the following registry keys to "1".

HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE\CustomerFeedback
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE\EnableErrorReporting
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\160\CustomerFeedback
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\160\EnableErrorReporting

Or in PowerShell, run:

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE" -Name CustomerFeedback -Value 0
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE" -Name EnableErrorReporting -Value 0
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Microsoft SQL Server\160" -Name CustomerFeedback -Value 0
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Microsoft SQL Server\160" -Name EnableErrorReporting -Value 0

Check Contents

Review the values for CustomerFeedback and EnableErrorReporting.

Option 1:
Launch "Registry Editor"

Navigate to:
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE
Review the following values: CustomerFeedback, EnableErrorReporting

Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\160
Review the following values: CustomerFeedback, EnableErrorReporting

Option 2:
Run the PowerShell commands:

Get-ItemProperty -Path "HKLM:\Software\Microsoft\Microsoft SQL Server\<SqlInstanceId>\CPE"
Get-ItemProperty -Path "HKLM:\ Software\Microsoft\Microsoft SQL Server\160"

Review the following values: CustomerFeedback, EnableErrorReporting

If this is a classified system, and any of the above values are not "0", this is a finding.

If this is an unclassified system, review the server documentation to determine whether CEIP participation is authorized.

If CEIP participation is not authorized, and any of the above values are "1", this is a finding.

Vulnerability Number

V-271389

Documentable

False

Rule Version

SQLI-22-016000

Severity Override Guidance

Review the values for CustomerFeedback and EnableErrorReporting.

Option 1:
Launch "Registry Editor"

Navigate to:
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE
Review the following values: CustomerFeedback, EnableErrorReporting

Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\160
Review the following values: CustomerFeedback, EnableErrorReporting

Option 2:
Run the PowerShell commands:

Get-ItemProperty -Path "HKLM:\Software\Microsoft\Microsoft SQL Server\<SqlInstanceId>\CPE"
Get-ItemProperty -Path "HKLM:\ Software\Microsoft\Microsoft SQL Server\160"

Review the following values: CustomerFeedback, EnableErrorReporting

If this is a classified system, and any of the above values are not "0", this is a finding.

If this is an unclassified system, review the server documentation to determine whether CEIP participation is authorized.

If CEIP participation is not authorized, and any of the above values are "1", this is a finding.

Check Content Reference

M

Target Key

5677