ACTIVE DIRECTORY SECURITY CHECKLIST ... - Leet Upload

More documents

Recommendations

Info

Active Directory Checklist, V1R1.2 Field Security Operations 22 September 2006 Defense Information Systems Agency DS05.0310 Synch\Maint Application Account Dedication STIG ID \ V-Key DS05.0310 \ V0011794 Severity Cat II Short Name Synch\Maint Application Account Dedication IA Controls ECLP-1 MAC /Conf 1-CSP, 2-CSP, 3-CSP References AD STIG 2.3.3.6 Long Name: An account used for a directory synchronization or maintenance application is not dedicated for that function. Checks: • Refer to the list of application accounts obtained in check DS05.0300. • For *each* application account: - Examine the Full Name information to determine if the account may be assigned as a user account (instead of an application account). - If the information is ambiguous, ask the SA to confirm whether the account is assigned as a user or application account. • If any synchronization or maintenance application account is assigned as a user account, then this is a finding. UNCLASSIFIED 5-42
Active Directory Checklist, V1R1.2 Field Security Operations 22 September 2006 Defense Information Systems Agency 5.6 Active Directory Application Mode Instance The checks in this section apply to ADAM Instance assets and are performed on each system on which ADAM is installed. DS15.0100 ADAM Host OS STIG ID \ V-Key DS15.0100 \ V0008343 Severity Cat I Short Name ADAM Host OS IA Controls ECAR-1, ECAR-2, ECAR-3 MAC /Conf 1-CSP, 2-CSP, 3-CSP References AD STIG 2.3.3.5 Long Name: ADAM is installed on a host OS that does not support adequate auditing for ADAM. Checks: • Execute the Windows version reporter (“Start”, “Run…”, “winver.exe”). • If the “About Windows” window indicates Windows XP, then this is a finding. UNCLASSIFIED 5-43
Page 1 and 2:
ACTIVE DIRECTORY SECURITY CHECKLIST
Page 3 and 4:
Active Directory Checklist, V1R1.2
Page 5 and 6:
Page 7 and 8:
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62: Active Directory Checklist, V1R1.2
Page 111: Active Directory Checklist, V1R1.2
show all

ACTIVE DIRECTORY SECURITY CHECKLIST ... - Leet Upload

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?