Skip to content
Log In

Active Directory Forest Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480

    Group
    Show

  • Anonymous Access to AD forest data above the rootDSE level must be disabled.

    For Windows Server 2003 or above, the dsHeuristics option can be configured to override the default restriction on anonymous access to AD data above the rootDSE level. Anonymous access to AD data c...
    Rule Medium Severity
    Show

  • SRG-OS-000355

    Group
    Show

  • SRG-OS-000480

    Group
    Show

  • Changes to the AD schema must be subject to a documented configuration management process.

    Poorly planned or implemented changes to the AD schema could cause the applications that rely on AD (such as web and database servers) to operate incorrectly or not all. Improper changes to the sc...
    Rule Low Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules