Detections
Analytics

1.60 SQLI-22-016000

Information

SQL Server must configure Customer Feedback and Error Reporting.

GROUP ID: V-271389RULE ID: SV-271389r1109133

By default, Microsoft SQL Server enables participation in the customer experience improvement program (CEIP). This program collects information about how its customers are using the product. Specifically, SQL Server collects information about the installation experience, feature usage, and performance. This information helps Microsoft improve the product to better meet customer needs.

Solution

To disable participation in the CEIP program, change the value of the following registry keys to '0'.

To enable participation in the CEIP program, change the value of the following registry keys to '1'.

HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server[InstanceId]\CPE\CustomerFeedbackHKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server[InstanceId]\CPE\EnableErrorReportingHKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\160\CustomerFeedbackHKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\160\EnableErrorReporting

Or in PowerShell, run:

Set-ItemProperty -Path 'HKLM:\Software\Microsoft\Microsoft SQL Server[InstanceId]\CPE' -Name CustomerFeedback -Value 0Set-ItemProperty -Path 'HKLM:\Software\Microsoft\Microsoft SQL Server[InstanceId]\CPE' -Name EnableErrorReporting -Value 0Set-ItemProperty -Path 'HKLM:\Software\Microsoft\Microsoft SQL Server\160' -Name CustomerFeedback -Value 0Set-ItemProperty -Path 'HKLM:\Software\Microsoft\Microsoft SQL Server\160' -Name EnableErrorReporting -Value 0

See Also

https://workbench.cisecurity.org/benchmarks/26144

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-271389r1109133_rule, STIG-ID|SQLI-22-016000, Vuln-ID|V-271389

Plugin: Windows

Control ID: 7ae0e6bd1900a63db75ef8c68b7659033d2ba49b34d9baf672aefc70397ca1b1