III - Administrative Public
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000324-GPOS-00125
Group -
Windows Server 2022 profile single process user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Profile single process" user right can monitor nonsystem processes p...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
Windows Server 2022 restore files and directories user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Restore files and directories" user right can circumvent file and di...Rule Medium Severity -
SRG-OS-000324-GPOS-00125
Group -
Windows Server 2022 take ownership of files or other objects user right must only be assigned to the Administrators group.
Inappropriate granting of user rights can provide system, administrative, and other high-level capabilities. Accounts with the "Take ownership of files or other objects" user right can take owners...Rule Medium Severity -
SRG-OS-000080-GPOS-00048
Group -
Windows Server 2022 must be configured for certificate-based authentication for domain controllers.
Active Directory domain services elevation of privilege vulnerability could allow a user rights to the system, such as administrative and other high-level capabilities.Rule Medium Severity -
SRG-OS-000080-GPOS-00048
Group -
Windows Server 2022 must be configured for name-based strong mappings for certificates.
Weak mappings give rise to security vulnerabilities and demand hardening measures. Certificate names must be correctly mapped to the intended user account in Active Directory. A lack of strong name...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.