Skip to content

Active Directory Forest Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000324

    <GroupDescription></GroupDescription>
    Group
  • Windows Server running Active Directory Certificate Services (AD CS) must be managed by a PAW tier 0.

    &lt;VulnDiscussion&gt;Verify that a site has set aside one or more PAWs for remote management of AD CS. &lt;/VulnDiscussion&gt;&lt;FalsePositives&g...
    Rule High Severity
  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
  • Anonymous Access to AD forest data above the rootDSE level must be disabled.

    &lt;VulnDiscussion&gt;For Windows Server 2003 or above, the dsHeuristics option can be configured to override the default restriction on anonymous ...
    Rule Medium Severity
  • SRG-OS-000355

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules