ACTIVE DIRECTORY SECURITY CHECKLIST ... - Leet Upload

Active Directory Checklist, V1R1.2 Field Security Operations
22 September 2006 Defense Information Systems Agency
DS10.0120 Support Tools Access Permissions
STIG ID \ V-Key DS10.0120 \ V0008320
Severity Cat II
Short Name Support Tools Access Permissions
IA Controls DCSL-1
MAC /Conf 1-CSP, 2-CSP, 3-CSP
References AD STIG 2.3.1.4
Long Name: Windows Support Tools program files do not have proper access permissions
(ACLs).
Checks:
• Start Windows Explorer.
• Right-click the “My Computer” item and select “Search…”
- Enter “Support*” in the file name field.
- Select “Local Hard Drives” in the “Look in:” field.
- Click the Search button.
• Record the location for the “Support Tools” directory.
Note: The SA may have installed the Support Tools in an alternate location. If the
default directory is not found, ask the SA.
• If the directory is not found and the SA confirms that the Support Tools are not
installed, then this check is Not Applicable.
• Using the recorded location, compare the ACL of the Support Tools directory to
the specifications in Checklist appendix A.1.2.
• If the actual permissions are not at least as restrictive as those in the appendix,
then this is a Finding.
UNCLASSIFIED
5-5