Microsoft has turned off all the potential features of SQL Server 2005 that could be susceptible to security risks and hacker attacks. Many features of SQL Server 2005 i.e. xp_cmdshell, DAC etc comes disabled by default, this makes the vulnerable surface area less visible to potential attacks. The Surface Area Configuration tool provides DBAs with a single, easy-to-use method of configuring external security of SQL Server. Use SQL Server Surface Area Configuration to enable, disable, start, or stop the features, services, and remote connectivity of your SQL Server 2005 installations. You can use SQL Server Surface Area Configuration on local and remote servers.
Following are the features of the SQL Server Surface Area Configuration Tool, which can be turned on and off as needed by application.
Analysis Services Features
- Ad-hoc Data Mining Queries
- Anonymous Connections
- Linked Objects
- User-Defined Functions
Database Engine Features
- Ad-hoc Remote Queries
- CLR Integration
- Database Mail
- HTTP Access
- OLE Automation
- Service Brokerenables
- SMO and DMO
- SQL Mail
- Web Assistant
- xp_cmdshell
Reporting Services Features
- HTTP and Web Service Requests
- Scheduled Events and Report Delivery
Following are the services of the SQL Server Surface Area Configuration Tool, which can be turned on and off as needed by application. Not all services are available in all the edition of SQL Server.
- Analysis Services
- Database Engine
- Full-Text Search Service
- Integration Services Service
- MSSQLServerADHelper Service
- Notification Services Service
- Reporting Services Service
- SQL Server Agent Service
- SQL Server Browser Service
- SQL Server Writer Service
Following diagrams explains the methods to enable the features and services using SQL Server Surface Area Configuration Tool.
1) On the Start menu, point to All Programs, Microsoft SQL Server 2005, Configuration Tools, and then click SQL Server Surface Area Configuration.
2) Click the change computer link adjacent to Configure Surface Area for. The default value is localhost. This can be changed and connected to any other SQL Server node.
3) After selecting the computer to configure, you can launch either of services.
- Surface Area Configuration for Services and Connections
- Surface Area Configuration for Features
Reference : Pinal Dave (https://blog.sqlauthority.com) , BOL, All the image are protected by copyright owned by SQLAutority.com
