+SYS.2.2.3.A23 Advanced Protection of Login Information in Windows 10 (H)

SYS.2.2.3.A23 Advanced Protection of Login Information in Windows 10 (H)

SecureBoot SHOULD be used on UEFI-based systems, and the status of the protected mode for the LSA credential store SHOULD be monitored during system startup (see also SYS.2.2.3.A11 Protection of Login Information in Windows 10). If remote maintenance of clients is intended using RDP, the “restrictedAdmin” option for RDP SHOULD be used for deployments of Windows 10 in domains with the functional level 2012 R2 or higher.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information