Linked Servers

The 5 checks in the “Linked Servers” category of a SQL Server audit: what each one verifies, its severity and the versions covered.

Checks in this category

LS002
Linked Servers SA/Admin Mapping
Critical
Detects linked servers with a mapping to SA or an admin account
Versions : 2012-2025
LS004
Linked Servers Open Login Mapping
High
Detects linked servers with open login mapping (self-mapping or be made)
Versions : 2012-2025
LS005
Loopback Linked Servers
Medium
Detects linked servers pointing to themselves (loopback)
Versions : 2012-2025
LS001
Linked Servers Configured
Info
Lists linked servers configured on the instance
Versions : 2012-2025
LS003
Linked Servers with RPC OUT
Info
Identifies linked servers with RPC OUT enabled allowing remote execution
Versions : 2012-2025