Windows Server 2019 must be configured for certificate-based authentication for domain controllers.
An XCCDF Rule
Description
Active Directory domain services elevation of privilege vulnerability could allow a user rights to the system, such as administrative and other high-level capabilities.
- ID
- SV-271428r1059563_rule
- Version
- WN19-DC-000391
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the registry value.
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: SYSTEM\CurrentControlSet\Services\Kdc
Value Name: StrongCertificateBindingEnforcement