+SYS.2.2.3.A23 Advanced Protection of Login Information in Windows 10 (H)

SYS.2.2.3.A23 Advanced Protection of Login Information in Windows 10 (H)

SecureBoot SHOULD be used on UEFI-based systems, and the status of the protected mode for the LSA credential store SHOULD be monitored during system startup (see also SYS.2.2.3.A11 Protection of Login Information in Windows 10). If remote maintenance of clients is intended using RDP, the “restrictedAdmin” option for RDP SHOULD be used for deployments of Windows 10 in domains with the functional level 2012 R2 or higher.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information