Detections
Analytics

SQLI-22-016000 - SQL Server must configure Customer Feedback and Error Reporting.

Information

By default, Microsoft SQL Server enables participation in the customer experience improvement program (CEIP). This program collects information about how its customers are using the product. Specifically, SQL Server collects information about the installation experience, feature usage, and performance. This information helps Microsoft improve the product to better meet customer needs.

Solution

To disable participation in the CEIP program, change the value of the following registry keys to '0'.

To enable participation in the CEIP program, change the value of the following registry keys to '1'.

HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE\CustomerFeedback
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE\EnableErrorReporting
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\160\CustomerFeedback
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server\160\EnableErrorReporting

Or in PowerShell, run:

Set-ItemProperty -Path 'HKLM:\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE' -Name CustomerFeedback -Value 0
Set-ItemProperty -Path 'HKLM:\Software\Microsoft\Microsoft SQL Server\[InstanceId]\CPE' -Name EnableErrorReporting -Value 0
Set-ItemProperty -Path 'HKLM:\Software\Microsoft\Microsoft SQL Server\160' -Name CustomerFeedback -Value 0
Set-ItemProperty -Path 'HKLM:\Software\Microsoft\Microsoft SQL Server\160' -Name EnableErrorReporting -Value 0

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_SQL_Server_2022_Y26M04_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-271389r1109133_rule, STIG-ID|SQLI-22-016000, Vuln-ID|V-271389

Plugin: Windows

Control ID: 4d42011014920bdfb7ed54bc8d6ddf07012bca85db389bed995dfd53b6f20bd5