Documentation - V-271305

Title

SQL Server must uniquely identify and authenticate users (or processes acting on behalf of organizational users).

Description

<VulnDiscussion>To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system. Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses, except the following:...

Fix Text (Documentation Requirement)

Remove all shared accounts and computer accounts. To remove users, run the following command for each user: DROP USER [ IF EXISTS ] <user_name>;