+APP.4.2.A16 Implementation of Security Requirements for the Windows Operating System (S)

APP.4.2.A16 Implementation of Security Requirements for the Windows Operating System (S)

The SAP ERP system SHOULD NOT be installed on a Windows domain controller. The SAP-specific users, such as <sid>adm or SAPService <sid>, SHOULD be secured. After installation, the user <db><sid> SHOULD be locked.

The user SAPService <sid> SHOULD NOT have any interactive login rights. With respect to these authorisations, the system resources associated with the SAP ERP system (such as files, processes, and shared memory) SHOULD be protected.

Appropriate settings SHOULD be used to secure the specific authorisations of the users Guest, System, SAP system users = <sapsid>adm, SAPService<SAPSID> and Database users = <database-specific users>, as well as user groups created by the SAP ERP system.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.14 Interception of Information / Espionage
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems