Skip to content

Microsoft Windows PAW Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
  • Windows PAWs must be restricted to only allow groups used to manage high-value IT resources and members of the local Administrators group to log on locally.

    &lt;VulnDiscussion&gt;A main security architectural construct of a PAW is to limit users of the PAW to only administrators of high-value IT resourc...
    Rule Medium Severity
  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
  • The domain must be configured to restrict privileged administrator accounts from logging on to lower-tier hosts.

    &lt;VulnDiscussion&gt;If the domain is not configured to restrict privileged administrator accounts from logging on to lower-tier hosts, it would b...
    Rule Medium Severity
  • SRG-OS-000132-GPOS-00067

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules