SqlStig
0.1.0.2
Configures all of the settings required by the SQL 2014 Draft STIG excluding the Logon Trigger requirement (I find this to essentially break everytime) and TDE.
Run both the Set-SQLInstanceStigItems and Set-SQLDatabaseStigItems to completely STIG the Instance. Requires some prior setup for SQL Agent Operators and Windows and/or Local Groups.
Installation Options
Owners
Copyright
(c) 2016 . All rights reserved.
Package Details
Author(s)
- Michael Haken
Tags
Functions
Set-SQLInstanceStigItems Set-SQLDatabaseStigItems Set-SQLInstanceForceEncryption Set-SQLInstanceDatabaseFilePermissions Set-SQLInstanceInstallationFilesPermissionsAndAuditing Set-SQLInstanceAuditFilePermissions Set-SQLInstanceAuditors Set-SQLInstanceAuditing Set-SQLDatabaseAuditing Set-SQLInstanceManagementRoles Get-SQLInstanceLogin Rename-SQLInstanceAccount Disable-SQLInstanceAccount Set-SQLInstanceXPCmdShell Set-SQLInstanceLoginPasswordPolicies Set-SQLInstanceProtocols Set-SQLInstanceDefaultTrace Add-SQLInstanceLogin Add-SQLInstanceServerRole New-SQLInstanceJobCategory New-SQLAgentJob New-SQLAgentJobStep New-SQLAgentJobSchedule Set-SQLDatabaseTrustworthy Get-SQLInstanceServerRoleMembership New-SQLDatabaseDDLTrigger Get-SQLInstanceErrorLogPath Get-SQLServer Get-SQLInstanceVersion Get-SQLInstanceDetails Get-SQLInstanceDataDirectories Enable-SQLInstanceDatabaseMail New-SQLInstanceDatabaseMailSmtpAccount New-SQLInstanceDatabaseMailProfile Set-SQLInstanceAgentMail Wait-SQLAgentService Get-SQLInstanceDefaultTraceFile Get-SQLInstanceAuditCommandText Get-SQLDatabaseDdlTriggerCommandText New-SQLInstanceDatabaseDirectoryAccessRuleSet New-SQLInstanceAuditLogAccessRuleSet New-SQLInstanceInstallationDirectoryAccessRuleSet New-SQLInstanceInstallationDirectoryAuditRuleSet Get-SQLAuditObjectTypes Import-SqlModule Test-SQLLoginIsSysAdmin
Dependencies
Release Notes
0.1.0.2*
Modified the query to find the SQL agent account.
0.1.0.1*
Removed a few functions that were not SQL specific to the HostUtilities module.
Did major code refactoring, but it does not impact the entry points to run the Instance STIG cmdlet and Database STIG cmdlet. The file permissions and auditing sections should produce much better results.
The Instance STIG cmdlet enables and sets up database mail. If an SMTP server is not provided, you'll need to update that afterwards. This just leaves creating Agent Operators before running the Datbase STIG cmdlet.
FileList
- SqlStig.nuspec
- SqlStig.psd1
- SqlStig.psm1
Version History
Version | Downloads | Last updated |
---|---|---|
0.1.0.2 (current version) | 1,193 | 3/4/2017 |
0.1.0.1 | 35 | 3/2/2017 |
0.0.0.3 | 221 | 5/13/2016 |
0.0.0.2 | 19 | 5/12/2016 |
0.0.0.1 | 21 | 5/11/2016 |