+SYS.2.2.2.A12 Secure Central Authentication of Windows Networks (S)

SYS.2.2.2.A12 Secure Central Authentication of Windows Networks (S)

In Windows-only networks, only Kerberos SHOULD be used for central authentication for Single Sign On (SSO). A group policy SHOULD prevent the use of older protocols. The protection of the Local Credential Store (LSA) SHOULD be activated (PPL, Protected Mode Light). The storage of LAN Manager hash values when changing passwords SHOULD be disabled based on a group policy. The monitoring settings SHOULD be aligned carefully with the requirements of the information domain in question together with the server components of DirectAccess. Client-side logging SHOULD be ensured.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.46 Loss of Integrity of Sensitive Information