SqlStig

Author(s)

• Michael Haken

Tags

SQL STIG Database DB Security

Functions

Set-SQLInstanceStigItems Set-SQLDatabaseStigItems Set-SQLInstanceForceEncryption Set-SQLInstanceDatabaseFilePermissions Set-SQLInstanceInstallationFilesPermissionsAndAuditing Set-SQLInstanceAuditFilePermissions Set-SQLInstanceAuditors Set-SQLInstanceAuditing Set-SQLDatabaseAuditing Set-SQLInstanceManagementRoles Get-SQLInstanceLogin Rename-SQLInstanceAccount Disable-SQLInstanceAccount Set-SQLInstanceXPCmdShell Set-SQLInstanceLoginPasswordPolicies Set-SQLInstanceProtocols Set-SQLInstanceDefaultTrace Add-SQLInstanceLogin Add-SQLInstanceServerRole New-SQLInstanceJobCategory New-SQLAgentJob New-SQLAgentJobStep New-SQLAgentJobSchedule Set-SQLDatabaseTrustworthy Get-SQLInstanceServerRoleMembership New-SQLDatabaseDDLTrigger Get-SQLInstanceErrorLogPath Get-SQLServer Get-SQLInstanceVersion Get-SQLInstanceDetails Get-SQLInstanceDataDirectories Enable-SQLInstanceDatabaseMail New-SQLInstanceDatabaseMailSmtpAccount New-SQLInstanceDatabaseMailProfile Set-SQLInstanceAgentMail Wait-SQLAgentService Get-SQLInstanceDefaultTraceFile Get-SQLInstanceAuditCommandText Get-SQLDatabaseDdlTriggerCommandText New-SQLInstanceDatabaseDirectoryAccessRuleSet New-SQLInstanceAuditLogAccessRuleSet New-SQLInstanceInstallationDirectoryAccessRuleSet New-SQLInstanceInstallationDirectoryAuditRuleSet Get-SQLAuditObjectTypes Import-SqlModule Test-SQLLoginIsSysAdmin

Dependencies

• • HostUtilities

Release Notes

0.1.0.1*
Removed a few functions that were not SQL specific to the HostUtilities module.

Did major code refactoring, but it does not impact the entry points to run the Instance STIG cmdlet and Database STIG cmdlet. The file permissions and auditing sections should produce much better results.

The Instance STIG cmdlet enables and sets up database mail. If an SMTP server is not provided, you'll need to update that afterwards. This just leaves creating Agent Operators before running the Datbase STIG cmdlet.