Solved

SQL server patching help needed

Posted on 2014-12-23
6
159 Views
Last Modified: 2015-01-22
Hey there,

I need help making sure my sql server is patched for a 3rd party audit that is occurring for PCI requirments.  The article below references the one needed and I'm ready to retest but is there a way to verify it's installed before running the penetration testing?  Should this simply be able to be done through windows update?  No sql upgrades required?

thx

metalfubar

https://technet.microsoft.com/library/security/MS14-044
0
Comment
Question by:metalfubar
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 34

Expert Comment

by:ste5an
ID: 40515055
I would run MBSA first. Then I would run Microsoft® SQL Server® 2012 Best Practices Analyzer .

For the rest: it depends. Normally "simply thru updates" is not enough. Cause this would mean that you install untested patches and updates. Often an unwanted scenario. But as I said, it depends on the kind of service your server should provide.
0
 

Author Comment

by:metalfubar
ID: 40515298
ok I installed and ran this and have included a screen shot of the results.  do I need to act on these?

Wsus is configured at corporate so these patches for windows are approved so we're good there.

thanks in advance.

metalfubar
sql-bpa-results.png
0
 
LVL 34

Expert Comment

by:ste5an
ID: 40515329
This means, that the user account your using for the scan - yours - is not an explicit member of the sysadmin group, which is a prerequisite.
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 40516088
You don't need to run MBSA before applying a patch. MBSA should be run periodically (once or twice by year depending on the changes you make in the SQL Server instance).

In what version of SQL Server you're going to apply the patch?
If you have MSSQL 2014 without Master Data Services then you don't need to apply this patch. Otherwise you can apply it (will cause a SQL Server restart).
0
 

Author Comment

by:metalfubar
ID: 40523626
is the sys admin group different than the local admins of which I'm a domain admin?

SQL version is 2012 SP2.

Under the normal windows updates, I'm not seeing sql specific patches since October.
0
 
LVL 50

Accepted Solution

by:
Vitor Montalvão earned 500 total points
ID: 40537476
Sorry for the delay in answering you but I was in holidays.

is the sys admin group different than the local admins of which I'm a domain admin?
There's no sys admin group in SQL Server but Sysadmin role than can be set to a user or a set of users. By default Windows Local Admin group doesn't has permissions in SQL Server.

Under the normal windows updates, I'm not seeing sql specific patches since October.
It's set to automatic applies? The CU3 for MSSQL2012 SP2 was released on November 2014.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SQL - Load records to temp table through CTE 6 38
sync 2 servers 2008 9 72
Windows Server 2008 R2 Stuck in black screen 22 59
SSIS Error on Bat File execute 2 11
Why is this different from all of the other step by step guides?  Because I make a living as a DBA and not as a writer and I lived through this experience. Defining the name: When I talk to people they say different names on this subject stuff l…
In the first part of this tutorial we will cover the prerequisites for installing SQL Server vNext on Linux.
Viewers will learn how to use the INSERT statement to insert data into their tables. It will also introduce the NULL statement, to show them what happens when no value is giving for any given column.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question