+SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)

SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)

In Windows Server 2012 R2, all users SHOULD be members of the security group “Protected Users”. Accounts for services and computers SHOULD NOT be members of the “Protected Users” group. Service accounts in Windows Server 2012 SHOULD be members of the “Managed Service Account” group. The PPL protection of the local security authority (LSA) SHOULD be activated. The use of dynamic access rules for resources SHOULD be preferred.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.37 Repudiation of Actions
blocks G 0.38 Misuse of Personal Information
blocks G 0.39 Malware
blocks G 0.40 Denial of Service
blocks G 0.41 Sabotage
blocks G 0.42 Social Engineering
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.46 Loss of Integrity of Sensitive Information