Some user accounts (2 of 24) have blank or simple passwords, or could not be analyzed. User Weak Password Locked Out Disabled DefaultAccount Weak - Disabled Guest Weak - Disabled WDAGUtilityAccount - - Disabled Administrator - - - MSSQLSERVER01 - - - MSSQLSERVER02 - - - MSSQLSERVER03 - - - MSSQLSERVER04 - - - MSSQLSERVER05 - - - MSSQLSERVER06 - - - MSSQLSERVER07 - - - MSSQLSERVER08 - - - MSSQLSERVER09 - - - MSSQLSERVER10 - - - MSSQLSERVER11 - - - MSSQLSERVER12 - - - MSSQLSERVER13 - - - MSSQLSERVER14 - - - MSSQLSERVER15 - - - MSSQLSERVER16 - - - MSSQLSERVER17 - - - MSSQLSERVER18 - - - MSSQLSERVER19 - - - MSSQLSERVER20 - - - No result data. (0x80070002) Computer is running Microsoft Windows Unknown. All hard drives (5) are using the NTFS file system. Drive Letter File System C: NTFS E: NTFS G: NTFS R: NTFS S: NTFS Some user accounts (23 of 24) have non-expiring passwords. User Administrator DefaultAccount Guest MSSQLSERVER01 MSSQLSERVER02 MSSQLSERVER03 MSSQLSERVER04 MSSQLSERVER05 MSSQLSERVER06 MSSQLSERVER07 MSSQLSERVER08 MSSQLSERVER09 MSSQLSERVER10 MSSQLSERVER11 MSSQLSERVER12 MSSQLSERVER13 MSSQLSERVER14 MSSQLSERVER15 MSSQLSERVER16 MSSQLSERVER17 MSSQLSERVER18 MSSQLSERVER19 MSSQLSERVER20 The Guest account is disabled on this computer. Autologon is not configured on this computer. Computer is properly restricting anonymous access. Internet Explorer zones do not have secure settings for some users. User Zone Level Recommended Level METIS-TH\Administrator Internet High High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable NT SERVICE\SSASTELEMETRY Internet Custom High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable Run ActiveX controls and plug-ins Enable Disable Active scripting Enable Disable NT SERVICE\SSISTELEMETRY130 Internet High High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable NT SERVICE\SQLTELEMETRY Internet High High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable NT SERVICE\MSSQLServerOLAPService Internet Custom High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable Run ActiveX controls and plug-ins Enable Disable Active scripting Enable Disable NT SERVICE\ReportServer Internet Custom High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable Run ActiveX controls and plug-ins Enable Disable Active scripting Enable Disable NT SERVICE\MSSQLFDLauncher Internet High High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable NT SERVICE\SQLSERVERAGENT Internet Custom High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable Run ActiveX controls and plug-ins Enable Disable Active scripting Enable Disable NT SERVICE\MSSQLLaunchpad Internet High High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable NT SERVICE\MsDtsServer130 Internet High High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable NT SERVICE\MSSQLSERVER Internet High High Setting Current Recommended Run components not signed with Authenticode Enable Disable Run components signed with Authenticode Enable Disable The use of Internet Explorer is restricted for administrators on this server. The use of Internet Explorer is restricted for non-administrators on this server. Neither Logon Success nor Logon Failure auditing are enabled. Enable auditing and turn on auditing for specific events such as logon and logoff. Be sure to monitor your event log to watch for unauthorized access. 8 share(s) are present on your computer. Share Directory Share ACL Directory ACL ADMIN$ C:\Windows Admin Share NT SERVICE\TrustedInstaller - F, NT AUTHORITY\SYSTEM - RWXD, BUILTIN\Administrators - RWXD, BUILTIN\Users - RX, APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES - RX, APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES - RX No more than 2 Administrators were found on this computer. User Domain\Testuser Administrator No supported Microsoft Office products are installed. No potentially unnecessary services were found. This check was skipped because it cannot be done remotely. The Automatic Updates system service is not configured to be started as Automatic. A previous software update installation was not completed. You must restart your computer to finish the installation. If the incomplete installation was a security update, then the computer may be at risk until the computer is restarted. SQL Server and/or MSDE is not running on a domain controller. SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode). CmdExec is restricted to sysadmin only. Internal error.(43.7) Instance Folder User (default) Internal error. - BUILTIN\Administrators group is not part of sysadmin role. The Guest account is not enabled in any of the databases. More than 2 members of sysadmin role are present. SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts should not be members of the local Administrators group or run as LocalSystem. Instance Service Account Issue (default) MSSQLServer NT Service\MSSQLSERVER This is a Domain Account. Baseline Security Analyzer cannot determine whether it belongs to the Domain Admins group due to the following error: 1212 The format of the specified domain name is invalid. . (default) SQLServerAgent NT Service\SQLSERVERAGENT This is a Domain Account. Baseline Security Analyzer cannot determine whether it belongs to the Domain Admins group due to the following error: 1212 The format of the specified domain name is invalid. . Enable password expiration for the SQL server accounts. The BUILTIN Admin does not belong to the SSIS roles. Sysdtslogs90 table does not exist in the Master or MSDB databases SQL Server and/or MSDE is not running on a domain controller. SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode). CmdExec is restricted to sysadmin only. Internal error.(43.7) Instance Folder User MSAS13.MSSQLSERVER Internal error. - [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts are not members of the local Administrators group and do not run as LocalSystem. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. SQL Server and/or MSDE is not running on a domain controller. SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode). CmdExec is restricted to sysadmin only. Internal error.(43.7) Instance Folder User MSRS13.MSSQLSERVER Internal error. - [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts are not members of the local Administrators group and do not run as LocalSystem. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. SQL Server and/or MSDE is not running on a domain controller. SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode). Error reading registry. If you are scanning a remote computer the Remote Registry service on that computer should be enabled. (13) Internal error.(43.7) Permissions on the SQL Server and/or MSDE installation folders are not set properly. Instance Folder User MSSQL13.MSSQLSERVER E:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn \CREATOR OWNER MSSQL13.MSSQLSERVER E:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn BUILTIN\Users MSSQL13.MSSQLSERVER E:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Binn NT SERVICE\MSSQLSERVER MSSQL13.MSSQLSERVER E:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Data \CREATOR OWNER MSSQL13.MSSQLSERVER E:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Data NT SERVICE\MSSQLSERVER MSSQL13.MSSQLSERVER E:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\Data Domain\Data [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts are not members of the local Administrators group and do not run as LocalSystem. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. SQL Server and/or MSDE is not running on a domain controller. SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode). CmdExec is restricted to sysadmin only. Internal error.(43.7) Instance Folder User (default) (32-bit) Internal error. - BUILTIN\Administrators group is not part of sysadmin role. The Guest account is not enabled in any of the databases. More than 2 members of sysadmin role are present. SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts should not be members of the local Administrators group or run as LocalSystem. Instance Service Account Issue (default) (32-bit) MSSQLServer NT Service\MSSQLSERVER This is a Domain Account. Baseline Security Analyzer cannot determine whether it belongs to the Domain Admins group due to the following error: 1212 The format of the specified domain name is invalid. . (default) (32-bit) SQLServerAgent NT Service\SQLSERVERAGENT This is a Domain Account. Baseline Security Analyzer cannot determine whether it belongs to the Domain Admins group due to the following error: 1212 The format of the specified domain name is invalid. . Enable password expiration for the SQL server accounts. The BUILTIN Admin does not belong to the SSIS roles. Sysdtslogs90 table does not exist in the Master or MSDB databases IIS is not running on this computer. 43