I - Mission Critical Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000324-GPOS-00125
<GroupDescription></GroupDescription>Group -
Only administrators responsible for the member server or standalone or nondomain-joined system must have Administrator rights on the system.
<VulnDiscussion>An account that does not have Administrator duties must not have Administrator rights. Such rights would allow the account to...Rule High Severity -
SRG-OS-000134-GPOS-00068
<GroupDescription></GroupDescription>Group -
Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems.
<VulnDiscussion>A compromised local administrator account can provide means for an attacker to move laterally between domain systems. With U...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
Local users on domain-joined computers must not be enumerated.
<VulnDiscussion>The username is one part of logon credentials that could be used to gain access to a system. Preventing the enumeration of us...Rule Medium Severity -
SRG-OS-000379-GPOS-00164
<GroupDescription></GroupDescription>Group -
Unauthenticated Remote Procedure Call (RPC) clients must be restricted from connecting to the RPC server.
<VulnDiscussion>Unauthenticated RPC clients may allow anonymous access to sensitive information. Configuring RPC to restrict unauthenticated ...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
<GroupDescription></GroupDescription>Group -
Caching of logon credentials must be limited.
<VulnDiscussion>The default Windows configuration caches the last logon credentials for users who log on interactively to a system. This feat...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.