II - Mission Support Public
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000080-GPOS-00048
Group -
The Allow log on locally user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Allow log on locally" user right can log on interactively to a system.Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
The Back up files and directories user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Back up files and directories" user right can circumvent file and di...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
The Create a pagefile user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Create a pagefile" user right can change the size of a pagefile, whi...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
The Create global objects user right must only be assigned to Administrators, Service, Local Service, and Network Service.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Create global objects" user right can create objects that are availa...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
The Create permanent shared objects user right must not be assigned to any groups or accounts.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Create permanent shared objects" user right could expose sensitive d...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
The Create symbolic links user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Create symbolic links" user right can create pointers to other objec...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
The Debug programs user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Debug programs" user right can attach a debugger to any process or t...Rule High Severity -
SRG-OS-000324-GPOS-00125
Group -
The Force shutdown from a remote system user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Force shutdown from a remote system" user right can remotely shut do...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
The Generate security audits user right must only be assigned to Local Service and Network Service.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. The "Generate security audits" user right specifies users and processes that can genera...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. The "Impersonate a client after authentication" user right allows a program to imperson...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.