If you have any additional questions that aren’t addressed in the blog, feel free to contact me. I’d be more than happy to help you out!
V-40950
Title: “SQL Server must support the employment of automated mechanisms supporting the auditing of the enforcement actions.”
Severity = Medium
Details = Verify that Files and Folders that are part of the SQL Server 2012 Installation have auditing enabled.
Right click the root folder of the SQL Server installation. Typically, this is at :\Program Files\Microsoft SQL Server\. Select Properties.
Click on the Security tab
Click on the Advanced button
Click on the Auditing tab
If “Everyone” is not listed in the “Name” column, this is a finding.
If “This folder, subfolders and files” is not listed in the “Apply To” column, this is a finding.
When “Everyone” … ” is listed, select the “Everyone” row and click on the Edit button.
If either the Successful or Failed checkbox is not selected for any of the following access types, this is a finding:
Traverse folder/execute file
List folder/read data
Read attributes
Read extended attributes
Create files/write data
Create folders/append data
Write attributes
Write extended attributes
Delete
Read permissions
FIX: Navigate to Advanced Security Settings by selecting Properties > Security > Advanced > Auditing > Continue.
Where “Everyone” is missing from the “Name” column, click the Add button; type “Everyone” in the object names box; click the OK button. The Auditing Entry dialog opens.
Where “Everyone” is in the “Name” column, select that row and click on the Edit button. The Auditing Entry dialog opens.
In the Auditing Entry dialog, set “Apply onto” to “This folder, subfolders and files”.
In the Auditing Entry dialog, select both the Successful and the Failed checkbox for each of the following access types, where not already selected:
Traverse folder/execute file
List folder/read data
Read attributes
Read extended attributes
Create files/write data
Create folders/append data
Write attributes
Write extended attributes
Delete
Read permissions
Click OK, OK, OK, OK to save the new settings and exit the dialog boxes.
This is pretty self explanatory. MSDN has a great article that addresses security considerations for a SQL Server installation. Read the article here. I also highly recommend buying a great book by Denny Cherry called, “Securing SQL Server.” I did a review of the book that you can read here.