UCF STIG Viewer Logo

Analysis Services Links From Objects should be disabled if not required.


Overview

Finding ID Version Rule ID IA Controls Severity
V-15186 DM6088-SQLServer9 SV-25469r1_rule DCFA-1 Medium
Description
Analysis Services allows other server instances to link to local analysis services objects. Where not required, enabling of this allowance can unnecessarily expose the database objects to unauthorized access or compromise.
STIG Date
Microsoft SQL Server 2005 Instance Security Technical Implementation Guide 2015-06-16

Details

Check Text ( C-13796r1_chk )
If Analysis Services is not deployed on the local host, this check is Not a Finding.

Note: To detect deployment, view Windows Services. If SQL Server Analysis Services ([instance name]) is not listed, then Analysis Services is not installed on this host.

If the System Security Plan indicates Links from Other instances is required for operation, this check is Not a Finding.

From the SQL Server Management Studio GUI:

1. Connect to the Analysis Services instance
2. Right click on the Analysis Services instance
3. Select Properties
4. View the value listed for Feature \ LinkFromOtherInstanceEnabled

If the value = 'true', this is a Finding.

The LinkFromOtherInstanceEnabled value may also be viewed in the Analysis Services configuration file, msmdsrv.ini under XML tag:

[LinkFromOtherInstanceEnabled]

The configuration file may be found in the [install dir] \ MSSQL.[#] \ OLAP \ Config directory.
Fix Text (F-14816r1_fix)
Set value for LinkFromOtherInstanceEnabled to 'false'.

From the SQL Server Management Studio GUI:

1. Connect to the Analysis Services instance
2. Right click on the Analysis Services instance
3. Select Properties
4. View the value listed for Feature \ LinkFromOtherInstanceEnabled
5. Select value = 'false'
6. Click OK