Summary
This guide provides detailed instructions for configuring MS SQL Server authentication to enhance the accuracy of scanning results. It covers the supported versions of MS SQL Server, including 2005 through 2022 for Windows and 2017 to 2022 for Unix. The document outlines the necessary privileges that must be granted to the scan account, particularly in the master database, to ensure comprehensive assessments. Specific SQL commands are provided to grant read-only privileges to the scan user, along with additional optional privileges for certain controls. The guide also emphasizes the importance of granting the correct permissions to avoid incomplete data during assessments, which can lead to false positives or negatives. It includes a script to verify the privileges of the scan account and details the prerequisites for assessing different databases, such as msdb and user databases. The document serves as a practical resource for users aiming to implement authenticated scanning effectively.
