Files and Directories

Check	Description
	Restrictive permissions are configured on SQL Server installation directories (per the guide).
	The Everyone group does not have permission to access SQL Server installation directories.
	Setup log files are secured.
	Tools, utilities, and SDKs are removed or secured.
	Sensitive data files are encrypted using EFS (This is an optional step. If implemented, use EFS only to encrypt MDF files, not LDF log files).