ACTIVE DIRECTORY SECURITY CHECKLIST ... - Leet Upload

Active Directory Checklist, V1R1.2 Field Security Operations
22 September 2006 Defense Information Systems Agency
DS05.0250 Synch\Maint Program Auditing
STIG ID \ V-Key DS05.0250 \ V0011790
Severity Cat II
Short Name Synch\Maint Program Auditing
IA Controls ECAT-1, ECAT-2
MAC /Conf 1-CSP, 2-CSP, 3-CSP
References AD STIG 2.3.3.5
Long Name: A directory synchronization or maintenance application is not configured to
collect audit data.
Checks:
• With the assistance of the application SA, determine the auditing components of
the synchronization or maintenance application.
- When supported by the product, review the audit configuration settings for the
product.
- Alternatively review logs or other evidence that indicates that audit data is being
collected.
• If the synchronization or maintenance application is not configured to collect
audit data, then this is a Finding.
DS05.0260 Synch\Maint Audit Data Tools
STIG ID \ V-Key DS05.0260 \ V0011791
Severity Cat III
Short Name Synch\Maint Audit Data Tools
IA Controls ECRG-1
MAC /Conf 1-CSP, 2-CSP, 3-CSP
References AD STIG 2.3.3.5
Long Name: Tools are not installed to support reviewing audit data from a directory
synchronization or maintenance application.
Checks:
• With the assistance of the application SA, invoke the tool used to review the audit
data for the synchronization or maintenance application.
- If the audit data is collected in a Windows Event Log, then the Event Viewer
would be used for this demonstration.
• If no tools are installed to allow the audit data to be reviewed, then this is a
Finding.
UNCLASSIFIED
5-39