Follow these basic tips to begin a secure installation of Microsoft SQL Server, and use the tools recommended here to help verify security after the install.
Collecting and distributing data is part of the responsibilities of network administration, and you must ensure that this data is verifiable and secure. Regardless of their host operating system, database servers require special attention to ensure the security of their operation.
Of course, security begins at installation. Let's look at how you can secure Microsoft SQL Server from the start.
Before beginning installation, go to the premise router or firewall and specifically block UDP and TCP ports 1433 and 1434 to the IP address of SQL Server. This will prevent a SQL injection compromise while you're installing the system.
Never install SQL Server on a Windows domain controller because an application vulnerability could lead to the compromise of your entire domain. Install each SQL Server on a fresh operating system that you've fully patched before installing applications and migrating data.
SQL Server services should always run under separate local accounts. That way, if a hacker compromises the application, other servers will remain unaffected.
If the server is going to service a Windows-based network, all connections to the server should require Windows Authentication. This spares users from having to remember another password, which they would probably have to write down to remember.
Service accounts
As always, service accounts require special attention to the privileges you grant them. SQL Server uses two service accounts: SQL Server Engine and SQL Server Agent. Both accounts should run as a domain user with regular account privileges.
If you use SQL Server Authentication instead of Windows Authentication, or if your server will run ActiveX scripts or CmdExec jobs (i.e., operating system commands or executable programs ending with .bat, .cmd, .com, or .exe), the SQL Server Agent account will need local Windows administrator privileges.
(Author's note: If you need to change the account associated with a SQL Server service, use SQL Server Enterprise Manager. The Enterprise Manager will set appropriate permissions on the files and registry keys used by SQL Server. Do not use the Services applet of the MMC in Control Panel to change these accounts. )
After installation
Clean up your installation by running Microsoft's KillPwd.exe utility, which removes the clear text sysadmin password stored in various setup files during installation.
After you've cleaned the installation files from your new server, run the Microsoft Baseline Security Analyzer (MBSA). This tool scans and tests your installation for several issues, including:
Finally, remember to audit failed connections. This is one of the most overlooked items of installation. You can enable auditing through the SQL Server Enterprise Manager. Follow these steps:
1. Right-click the server and select Properties.
2. On the Security tab, select Failure under Audit Level.
3. Stop and restart the server for auditing to begin.
This is only the beginning to performing a secure SQL Server installation. If your server will collect data from a public Web server, you should limit those SQL ports to the IP address of your Web server. There are many excellent uses for a database server, but they all must begin with a secure installation.
TechRepublic is the online community and information resource for all IT professionals, from support staff to executives. We offer in-depth technical articles written for IT professionals by IT professionals. In addition to articles on everything from Windows to e-mail to firewalls, we offer IT industry analysis, downloads, management tips, discussion forums, and e-newsletters.
©2004 TechRepublic, Inc.
6%
1%
