SQL Server – Security Implications of Enabling Data Access

availability-groupsopenrowsetsql serversql-server-2016

I'm trying to run an OPENQUERY statement within a local server but am getting the following error:

Server 'MyLocalServer' is not configured for DATA ACCESS.

If I set MyLocalServer's Data Access option to true, what are the potential security implications?

Also can this affect anything with an AlawaysOn AG that MyLocalServer is a part of?

Best Answer

Enabling Data Access is not considered a finding in the CIS Microsoft SQL Server 2016 Benchmark but that doesn't mean it couldn't be a problem if it's poorly implemented.

If you are querying data on another server limit the privileges granted to the remote user.

Related Question