Application software should be owned by a Software Application account.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Application software should be owned by a Software Application account.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3805	DG0019-SQLServer9	SV-24135r1_rule	DCSL-1 ECSD-1 ECSD-2	Low

Description
File and directory ownership imparts full privileges to the owner. These privileges should be restricted to a single, dedicated account to preserve proper chains of ownership and privilege assignment management.

STIG	Date
Microsoft SQL Server 2005 Instance Security Technical Implementation Guide	2015-06-16

Details

Check Text ( C-13742r1_chk )
Review the ownership of all DBMS and dependent application software and configuration files. If the owner is other than the software installation account or the designated owner account for the file, this is a Finding. Some configuration and log files may be owned by a service or process account. Ownership of these files should be recorded and verified accordingly.

Fix Text (F-14810r1_fix)
Assign DBMS file and directory ownership to the software installation and maintenance account. Use the software owner account to install and maintain the DBMS software libraries and configuration files.