ACTIVE DIRECTORY SECURITY CHECKLIST ... - Leet Upload

Active Directory Checklist, V1R1.2 Field Security Operations
22 September 2006 Defense Information Systems Agency
• Return to the initial console view.
• For *each* AD OU that is defined (folder in folder icon):
- Right-click the OU and select the Properties item.
- On the OU Properties window, select the Group Policy tab.
- For *each* Group Policy Object Link:
-- Select the Group Policy Object Link item
-- Select the Properties button.
-- On the OU Group Policy Properties window, select the Security tab.
-- Select the Advanced button and then the Auditing tab.
-- Compare the audit settings of the OU Group Policy to the specifications for
Group Policy Objects in Checklist appendix A.4.
• If the actual audit settings for any OU Group Policy object are not at least as
inclusive as those in the appendix, then this is a Finding.
Note: Each domain has at least one OU that has a Group Policy. This will be the
Domain Controllers OU.
C. Domain Object Procedures
• Start the Active Directory Users and Computers console (“Start”, “Run…”,
“dsa.msc”). Ensure that the Advanced Features item on the View menu is
enabled.
• Select the left pane item that matches the name of the domain being reviewed.
- Right-click the domain name and select the Properties item.
- On the domain object Properties window, select the Security tab.
- Select the Advanced button and then the Auditing tab.
- Compare the audit settings of the domain object to the specifications for Domain
Objects in Checklist appendix A.4.
• If the actual audit settings are not at least as inclusive as those in the appendix,
then this is a Finding.
D. Infrastructure Object Procedures
• Start the Active Directory Users and Computers console (“Start”, “Run…”,
“dsa.msc”). Ensure that the Advanced Features item on the View menu is
enabled.
• Select the left pane item that matches the name of the domain being reviewed.
- Right-click the Infrastructure object and select the Properties item.
- On the Infrastructure object Properties window, select the Security tab.
- Select the Advanced button and then the Auditing tab.
- Compare the audit settings of the Infrastructure object to the specifications for
Infrastructure Objects in Checklist appendix A.4.
• If the actual audit settings are not at least as inclusive as those in the appendix,
then this is a Finding.
UNCLASSIFIED
5-13