Windows Server 2022 must be configured for certificate-based authentication for domain controllers.
An XCCDF Rule
Description
Active Directory domain services elevation of privilege vulnerability could allow a user rights to the system, such as administrative and other high-level capabilities.
- ID
- SV-271426r1059557_rule
- Version
- WN22-DC-000405
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the registry value.
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: SYSTEM\CurrentControlSet\Services\Kdc
Value Name: StrongCertificateBindingEnforcement