0% found this document useful (0 votes)
72 views

Incomplete Scan (Could Not Complete One or More Requested Checks.)

This security assessment report summarizes the results of a scan of a computer. The scan found that security updates were not installed due to the computer not being assigned to a Windows Server Update Services server. It also found passwords were expired on some user accounts, unneeded services were installed, and that the Windows Firewall had exceptions configured. The report provided additional details on issues found for Windows, IIS, and SQL Server configurations.

Uploaded by

Mohamed Ziyad
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
72 views

Incomplete Scan (Could Not Complete One or More Requested Checks.)

This security assessment report summarizes the results of a scan of a computer. The scan found that security updates were not installed due to the computer not being assigned to a Windows Server Update Services server. It also found passwords were expired on some user accounts, unneeded services were installed, and that the Windows Firewall had exceptions configured. The report provided additional details on issues found for Windows, IIS, and SQL Server configurations.

Uploaded by

Mohamed Ziyad
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 9

Page 1 of 9

Security assessment:

Incomplete Scan (Could not complete one or more requested checks.)


Computer name: IP address: Security report name: Scan date: Catalog synchronization date: Security update catalog: W O RKGRO UP CO M PUTER 192. 168. 136 1. W O RKGRO UP -CO M PUTER ( 1011- 2011 9- AM ) 59 11/ 2011 9: AM 10/ 59

Wi ndow s Ser Updat Ser ces ver e vi

Security Updates
Score Issue Securt iy Updat es Result Cannot scan because t get com put i not assi ar er s gned t a W SUS ser . o ver

Windows Scan Results


Administrative Vulnerabilities Score Issue Passw or d Expiaton r i Result s 4 expii passw or rng ds. Som e user account ( of 5) have nonUser Adm i st at ni r or Guest Hom eGr oupUser $ user

Wi ndow s Fiew al r l

Wi ndow s Fiew al i enabl and has exceptons confgur W i r ls ed i i ed. ndow s Fiew al i enabl on al net or r ls ed l w k connectons. i Connection Name Firewall Exceptions Al Connectons l i LocalAr Connecton ea i Team Vi er VPN ew VM w ar Net or Adapt VM net e w k er 1 VM w ar Net or Adapt VM net e w k er 8 On On On On On Por s,Pr am s,Ser ces t ogr vi Por s*,Pr am s*,Ser ces* t ogr vi Por s*,Pr am s*,Ser ces* t ogr vi Por s*,Pr am s*,Ser ces* t ogr vi Por s*,Pr am s*,Ser ces* t ogr vi

I ncom pl e et Updat es LocalAccount Passw or Test d

No i ncom pl e sof w ar updat i alatons w er f et t e e nst l i e ound.

Som e user account ( of 5) have bl s 2 ank or si pl passw or or coul not be anal m e ds, d yzed. User Weak Password Locked Out Adm i st at ni r or Guest Hom eGr oupUser $ __vm w ar e_user __ user W eak W eak -

Disabled Di ed sabl Di ed sabl -

Fie Syst l em

5) e ng he ie em Al har drves ( ar usi t NTFS fl syst . l d i Drive Letter C: D: F: G: H:

File System NTFS NTFS NTFS NTFS NTFS

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

Page 2 of 9

Guest Account

s sabl hi er The Guest account i di ed on t s com put .

Aut ogon ol

Aut ogon i not confgur on t s com put . ol s i ed hi er

Rest i rct Anonym ous Adm i st at s ni r or

er s opery r rctng anonym ous access. l est i i Com put i pr

e han 2 Adm i st at s w er f ni r or e ound on t s com put . hi er No m or t User Adm i st at ni r or user

Aut atc om i Updat es

Updat ar aut atcaly dow nl es e om i l oaded and i aled on t s com put . nst l hi er

Additional System Information Score Issue Wi ndow s Ver on si Audii tng Result Com put i r er s unni M i osof W i ng cr t ndow s 7.

Neiher Logon Success nor Logon Faiur audii ar enabl Enabl audii and t n on audii f t l e tng e ed. e tng ur tng or s ogon and l ogof .Be sur t m onior your event l t w at f unaut i access. f e o t og o ch or horzed specii event such as l fc

Shar es

er 10 shar s) ar pr e( e esent on your com put . Share Directory Share ACL Canon M P490 seres i Canon i er Local O nl spl y M P490 seresPrnt , i Prnt i er ADM I N$ C: W i \ ndow s

Directory ACL

Prnt Q ueue Shar Diect y ACL can not be r i e r or ead.

Adm i Shar n e

NT SERVI Tr edI aler- F,NT CE\ ust nst l AUTHO RI SYSTEM - RW XD, TY\ ni r or LTI User s BUI N\ LTI Adm i st at s - RW XD,BUI N\ RX BUI N\ LTI Adm i st at s - F,NT ni r or LTI User - RX,NT s AUTHO RI SYSTEM - F,BUI N\ TY\ AUTHO RI Aut TY\ hentcat User - D i ed s BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F,NT TY\ i ed s AUTHO RI Aut TY\ hentcat User - RW XD, BUI N\ LTI User - RX s BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F,NT TY\ AUTHO RI Aut TY\ hentcat User - RW XD, i ed s BUI N\ LTI User - RX s BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F,NT TY\ AUTHO RI Aut TY\ hentcat User - RW XD, i ed s s BUI N\ LTI User - RX BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F,NT TY\ i ed s AUTHO RI Aut TY\ hentcat User - RW XD, BUI N\ LTI User - RX s

C$

C: \

Adm i Shar n e

D$

D: \

Adm i Shar n e

F$

F: \

Adm i Shar n e

G$

G: \

Adm i Shar n e

H$

H: \

Adm i Shar n e

Hr s m

D: Hr s \ m

Adm i st at s - F,CO M PUTER\ ni r or user- F,CO M PUTER\ Hom eUser - F, s Ever yone - F BUI N\ LTI Adm i st at s - F,NT ni r or AUTHO RI SYSTEM - F TY\ Adm i st at s - F,NT AUTHO RI SYSTEM - F, ni r or TY\ BUI N\ LTI Adm i st at s - F,BUI N\ Ever yone - F ni r or LTI User - RX, s yone - RX Ever Ever yone - R, NT AUTHO RI SYSTEM - F, TY\

User s

C: User \ s

prnt i $

C: W i \ ndow s\ syst 32 em

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

Page 3 of 9

\ spooldrver \ i s

Adm i st at s - F BUI N\ ni r or LTI Adm i st at s - F,Ever ni r or yone - RX

Ser ces vi

Som e pot i l unnecessar ser ces ar i aled. entaly y vi e nst l Service Tel net W ord W i W eb Publshi Ser ce l de i ng vi

State St opped Runni ng

Internet Information Services (IIS) Scan Results


Administrative Vulnerabilities Score Issue Sam pl e Applcatons i i I SAdm i I n Vit r ual Diect y r or Par Pat ent hs Result I S sam pl applcatons ar not i aled. I e i i e nst l

r ual r or s esent . I SADM PW D vit diect y i not pr I

Par pat ar not enabl ent hs e ed.

M SADC and Scrpt Vit i s r ual Diect i r ores I S Lockdow n I Tool

i s r ual r ores e esent . The M SADC and Scrpt vit diect i ar not pr

The I S Lockdow n t w as devel I ool oped f I S 4. 5. and 5. and i not needed f new W i or I 0, 0, 1, s or ndow s Ser ver nst l i unni I S 6. ng I 0. 2003 i alatons r

Additional System Information Score Issue I S Loggi I ng Enabl ed Result t e ng he ecom m ended l oggi optons. ng i Al w eb and FTP sies ar usi t r l

SQL Server Scan Results: Instance (default)


Administrative Vulnerabilities Score Issue Result

Passw or Polcy Enabl passw or expiaton f t SQ L ser account d i e d r i or he ver s.

SQ L Ser / SDE ver M Securt M ode iy Sysadm i ns

SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) .

s n ol e esent . M or t e han 2 m em ber of sysadm i r e ar pr

Ser ce vi Account s

SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account shoul not be m em ber of t l ver ver , or vi s d s he ocal Adm i st at s gr ni r or oup or r as Local em . un Syst Instance Service Account Issue ( aul) def t ( aul) def t M SSQ LSer ver SQ LSer Agent ver SYSTEM SYSTEM Local em account Syst . Local em account Syst .

Cm dExec r e ol

Cm dExec i r rct t sysadm i onl s est i ed o n y.

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

Page 4 of 9

Regi r st y Per i ons m ssi Fol der Per i ons m ssi

yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r The Ever

Instance ( aul) def t

Folder I er er or nt nal r .

User -

Sysadm i r e n ol m em ber s Guest Account

ni r or oup i not par of sysadm i r e. s t n ol BUI N Adm i st at s gr LTI

s ed n he abases. The Guest account i not enabl i any of t dat

SSI Rol S es

The BUI N Adm i does not bel LTI n ong t t SSI r es. o he S ol

Sysdt og sl

sl abl st n he er abases Sysdt ogs90 t e does not exi i t M ast or M SDB dat

SQL Server Scan Results: Instance MSAS10.MSSQLSERVER


Administrative Vulnerabilities Score Issue SQ L Ser / SDE ver M Securt M ode iy Cm dExec r e ol Result ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) . SQ L Ser and/ M SDE aut

s est i ed o n y. Cm dExec i r rct t sysadm i onl

Regi r st y Per i ons m ssi Fol der Per i ons m ssi

The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r

Instance M SAS10. SSQ LSERVER M

Folder I er er or nt nal r .

User -

Ser ce vi Account s

SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account ar not m em ber of t l ver ver , or vi s e s he ocal ni r or oup and do not r as Local em . un Syst Adm i st at s gr

Sysadm i r e n ol m em ber s Guest Account

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

Sysadm i ns

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

Passw or Polcy [ d i i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. DBNETLI [ B] ConnectonO pen (

SSI Rol S es

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

Sysdt og sl

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

SQL Server Scan Results: Instance MSRS10.MSSQLSERVER


Administrative Vulnerabilities

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

Page 5 of 9

Score Issue SQ L Ser / SDE ver M Securt M ode iy Cm dExec r e ol

Result ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) . SQ L Ser and/ M SDE aut

s est i ed o n y. Cm dExec i r rct t sysadm i onl

Regi r st y Per i ons m ssi Fol der Per i ons m ssi

The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r

Instance M SRS10. SSQ LSERVER M

Folder I er er or nt nal r .

User -

Ser ce vi Account s

SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account ar not m em ber of t l ver ver , or vi s e s he ocal Adm i st at s gr ni r or oup and do not r as Local em . un Syst

Sysadm i r e n ol m em ber s Guest Account

[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

Sysadm i ns

[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

Passw or Polcy [ d i DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

SSI Rol S es

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

Sysdt og sl

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

SQL Server Scan Results: Instance MSSQL10.MSSQLSERVER


Administrative Vulnerabilities Score Issue Cm dExec r e ol Result e ng em e er he e st y vi hat er d Er or r r eadi r st y.I you ar scanni a r ot com put t Rem ot Regi r ser ce on t com put shoul ng egi r f ( 13)

Fol der Per i ons on t SQ L Ser and/ M SDE i alaton f der ar not set pr m ssi he ver or nst l i ol s e opery. l Per i ons Instance m ssi Folder User \ ogr l M cr t \ CREATO R O W NER M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ nn ver M M M Bi \ ogr l M cr t BUI N\ LTI User s M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ nn ver M M M Bi M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M \ ogr l M cr t CO M PUTER\ LSer M SSQ LUser SQ ver $Rout $M er Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ nn ver M M M Bi M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M \ ogr l M cr t \ CREATO R O W NER Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ a ver M M M Dat \ ogr l M cr t CO M PUTER\ LSer M SSQ LUser SQ ver $Rout $M er M SSQ L10. SSQ LSERVERC: Pr am Fies\ i osof SQ L M Ser \ SSQ L10. SSQ LSERVER\ SSQ L\ a ver M M M Dat

SQ L SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) . Ser / SDE ver M Securt iy M ode Regi r st y yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r The Ever Per i ons m ssi

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

Page 6 of 9

Ser ce vi Account s

SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account ar not m em ber of t l ver ver , or vi s e s he ocalAdm i st a ni r and do not r as Local em . un Syst

Sysadm i n r e ol m em ber s Guest Account Sysadm i ns

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

Passw or d Polcy i SSI Rol S es

[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

Sysdt og sl

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

SQL Server Scan Results: Instance MSSQL10.SQLEXPRESS


Administrative Vulnerabilities Score Issue Cm dExec r e ol Result Er or r r eadi r st y.I you ar scanni a r ot com put t Rem ot Regi r ser ce on t com put shoul ng egi r f e ng em e er he e st y vi hat er d enabl ( ed. 13)

Fol der Per i ons on t SQ L Ser and/ M SDE i alaton f der ar not set pr m ssi he ver or nst l i ol s e opery. l Per i ons Instance m ssi Folder User \ ogr l M cr t \ CREATO R O W NER M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ Ser \ SSQ L10. LEXPRESS\ SSQ L\ nn ver M SQ M Bi s M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ \ ogr l M cr t BUI N\ LTI User Ser \ SSQ L10. LEXPRESS\ SSQ L\ nn ver M SQ M Bi M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ \ ogr l M cr t CO M PUTER\ LSer M SSQ LUser SQ ver $Rout $SQ LE er Ser \ SSQ L10. LEXPRESS\ SSQ L\ nn ver M SQ M Bi M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ \ ogr l M cr t \ CREATO R O W NER Ser \ SSQ L10. LEXPRESS\ SSQ L\ a ver M SQ M Dat \ ogr l M cr t SQ ver $Rout $SQ LE er M SSQ L10. LEXPRESSC: Pr am Fies\ i osof SQ L SQ CO M PUTER\ LSer M SSQ LUser Ser \ SSQ L10. LEXPRESS\ SSQ L\ a ver M SQ M Dat

SQ L SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t W i i i s o ndow s O nl y. Ser / SDE ver M Securt iy M ode Regi r st y The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r Per i ons m ssi Ser ce vi Account s SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account ar not m em ber of t l ver ver , or vi s e s he ocalAdm i st a ni r gr oup and do not r as Local em . un Syst

Sysadm i n r e ol m em ber s Guest Account Sysadm i ns

[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

Page 7 of 9

Passw or d Polcy i SSI Rol S es

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

[ DBNETLI [ B] ConnectonO pen ( i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed.

Sysdt og sl

i Connect ) . SQ L Ser does not exi or access deni ( )] ver st ed. [ DBNETLI [ B] ConnectonO pen (

SQL Server Scan Results: Instance SQLEXPRESS


Administrative Vulnerabilities Score Issue Ser ce vi Account s Result SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account shoul not be m em ber of t l ver ver , or vi s d s he ocal ni r or oup or r as Local em . un Syst Adm i st at s gr Instance Service Account Issue SQ LEXPRESSM SSQ L$SQ LEXPRESS NT AUTHO RI NETW O RK TY\ SERVI CE Thi i a Dom ai Account Baselne Securt ss n . i iy Anal yzer cannot det m i w het i bel er ne her t ongs t t Dom ai Adm i gr o he n ns oup due t t o he f l i er or 1212 The f m at of t olow ng r : or he specii dom ai nam e i i i . fed n s nvald. Thi i a Dom ai Account Baselne Securt ss n . i iy Anal yzer cannot det m i w het i bel er ne her t ongs t t Dom ai Adm i gr o he n ns oup due t t o he f l i er or 1212 The f m at of t olow ng r : or he specii dom ai nam e i i i . fed n s nvald.

SQ LEXPRESSSQ LAgent $SQ LEXPRESSNT AUTHO RI NETW O RK TY\ SERVI CE

Passw or Polcy Enabl passw or expiaton f t SQ L ser account d i e d r i or he ver s.

SQ L Ser / SDE ver M Securt M ode iy Sysadm i ns

ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode) . SQ L Ser and/ M SDE aut

s n ol e esent . M or t e han 2 m em ber of sysadm i r e ar pr

Cm dExec r e ol

Cm dExec i r rct t sysadm i onl s est i ed o n y.

Regi r st y Per i ons m ssi Fol der Per i ons m ssi

The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r

Instance SQ LEXPRESS

Folder I er er or nt nal r .

User -

Sysadm i r e n ol m em ber s Guest Account

BUI N Adm i st at s gr LTI ni r or oup i not par of sysadm i r e. s t n ol

The Guest account i not enabl i any of t dat s ed n he abases.

SSI Rol S es

The BUI N Adm i does not bel LTI n ong t t SSI r es. o he S ol

Sysdt og sl

sl abl st n he er abases Sysdt ogs90 t e does not exi i t M ast or M SDB dat

SQL Server Scan Results: Instance (default) (32-bit)


Administrative Vulnerabilities Score Issue Result

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

Page 8 of 9

Passw or Polcy Enabl passw or expiaton f t SQ L ser account d i e d r i or he ver s.

SQ L Ser / SDE ver M Securt M ode iy Sysadm i ns

. SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode)

s n ol e esent . M or t e han 2 m em ber of sysadm i r e ar pr

Ser ce vi Account s

SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account shoul not be m em ber of t l ver ver , or vi s d s he ocal Adm i st at s gr ni r or oup or r as Local em . un Syst Instance Service Account Issue ( aul) ( bi) def t 32- t ( aul) ( bi) def t 32- t M SSQ LSer ver SQ LSer Agent ver SYSTEM SYSTEM Local em account Syst . Local em account Syst .

Cm dExec r e ol

s est i ed o n y. Cm dExec i r rct t sysadm i onl

Regi r st y Per i ons m ssi Fol der Per i ons m ssi

The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r

Instance ( aul) ( bi) def t 32- t

Folder I er er or nt nal r .

User -

Sysadm i r e n ol m em ber s Guest Account

BUI N Adm i st at s gr LTI ni r or oup i not par of sysadm i r e. s t n ol

s ed n he abases. The Guest account i not enabl i any of t dat

SSI Rol S es

n ong t t SSI r es. o he S ol The BUI N Adm i does not bel LTI

Sysdt og sl

sl abl st n he er abases Sysdt ogs90 t e does not exi i t M ast or M SDB dat

SQL Server Scan Results: Instance SQLEXPRESS (32-bit)


Administrative Vulnerabilities Score Issue Ser ce vi Account s Result SQ L Ser ,SQ L Ser Agent M SDE and/ M SDE Agent ser ce account shoul not be m em ber of t l ver ver , or vi s d s he ocal Adm i st at s gr ni r or oup or r as Local em . un Syst Instance Service Account Issue SQ LEXPRESS M SSQ L$SQ LEXPRESS ( bi) 32- t NT AUTHO RI NETW O RK TY\ SERVI CE Thi i a Dom ai Account Baselne Securt ss n . i iy Anal yzer cannot det m i w het i bel er ne her t ongs t t Dom ai Adm i gr o he n ns oup due t t o he f l i er or 1212 The f m at of t olow ng r : or he specii dom ai nam e i i i . fed n s nvald. Thi i a Dom ai Account Baselne Securt ss n . i iy Anal yzer cannot det m i w het i bel er ne her t ongs t t Dom ai Adm i gr o he n ns oup due t t o he f l i er or 1212 The f m at of t olow ng r : or he specii dom ai nam e i i i . fed n s nvald.

SQ LEXPRESS SQ LAgent $SQ LEXPRESSNT AUTHO RI NETW O RK TY\ ( bi) 32- t SERVI CE

Passw or Polcy Enabl passw or expiaton f t SQ L ser account d i e d r i or he ver s.

SQ L Ser / SDE ver M Securt M ode iy

. SQ L Ser and/ M SDE aut ver or hentcaton m ode i set t SQ L Ser and/ M SDE and W i i i s o ver or ndow s ( i M xed M ode)

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

Page 9 of 9

Sysadm i ns

s n ol e esent . M or t e han 2 m em ber of sysadm i r e ar pr

Cm dExec r e ol

Cm dExec i r rct t sysadm i onl s est i ed o n y.

Regi r st y Per i ons m ssi Fol der Per i ons m ssi

The Ever yone gr oup does not have m or t e han Read access t t SQ L Ser and/ M SDE r st y keys. o he ver or egi r

Instance SQ LEXPRESS ( bi) 32- t

Folder I er er or nt nal r .

User -

Sysadm i r e n ol m em ber s Guest Account

ni r or oup i not par of sysadm i r e. s t n ol BUI N Adm i st at s gr LTI

The Guest account i not enabl i any of t dat s ed n he abases.

SSI Rol S es

n ong t t SSI r es. o he S ol The BUI N Adm i does not bel LTI

Sysdt og sl

sl abl st n he er abases Sysdt ogs90 t e does not exi i t M ast or M SDB dat

Desktop Application Scan Results


Administrative Vulnerabilities Score Issue I Zones E Result nt net or e tngs f al user or l s. I er Expl er zones have secur set i

M acr Securt o iy

No suppor ed M i osof O f i pr t cr t fce oduct ar i aled. s e nst l

file:///C:/Program%20Files/Microsoft%20Baseline%20Security%20Analyzer%202/Pr... 11/10/2011

You might also like