Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

In Active Directory Users and Computers open the SharePoint setup account > Member Of. Verify it is a member of Domain Users only, and that no other delegated rights, services or permissions are assigned to it.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Remove the setup account from every AD group other than Domain Users and remove any additional delegated permissions.