STIGQter STIGQter: STIG Summary: MS SQL Server 2014 Instance Security Technical Implementation Guide Version: 1 Release: 10 Benchmark Date: 24 Apr 2020:

SQL Server must have the Management Tools software component removed if it is unused.

DISA Rule

SV-82337r1_rule

Vulnerability Number

V-67847

Group Title

SRG-APP-000141-DB-000091

Rule Version

SQL4-00-016850

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Either using the Start menu or via the command "control.exe", open the Windows Control Panel. Open Programs and Features. Double-click on Microsoft SQL Server 2014. In the dialog box that appears, select Remove. Wait for the Remove wizard to appear.

Select the relevant SQL Server instance; click Next.

Select Management Tools - Basic and Management Tools - Complete; click Next.

Follow the remaining prompts, to remove Management Tools from SQL Server.

Check Contents

If the SQL Server Management Tools are used and satisfy organizational requirements, this is not a finding.

In Windows Server 2008 R2 or lower, click on the Start button. In the Start menu, navigate to All Programs >> Microsoft SQL Server 2014.

If the SQL Server Management Studio is listed, this is a finding.

In Windows Server 2012 or higher, click on the Start button. In the Start menu, navigate to Apps >> Microsoft SQL Server 2014.

If the SQL Server Management Studio is listed, this is a finding.

Vulnerability Number

V-67847

Documentable

False

Rule Version

SQL4-00-016850

Severity Override Guidance

If the SQL Server Management Tools are used and satisfy organizational requirements, this is not a finding.

In Windows Server 2008 R2 or lower, click on the Start button. In the Start menu, navigate to All Programs >> Microsoft SQL Server 2014.

If the SQL Server Management Studio is listed, this is a finding.

In Windows Server 2012 or higher, click on the Start button. In the Start menu, navigate to Apps >> Microsoft SQL Server 2014.

If the SQL Server Management Studio is listed, this is a finding.

Check Content Reference

M

Target Key

2639

Comments