Ensure that the User-ID service account does not have interactive logon rights

MoyenneNiveau 1Revue manuellepaloalto

Description

Restrict the User-ID service account from interactively logging on to systems in the Active Directory domain.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Navigate to Active Directory Group Policies. Verify that Group Policies restricts the interactive logon privilege for the User-ID service account. or Navigate to Active Directory Managed Service Accounts. Verify that Managed Service Accounts restricts the interactive logon privilege for the User-ID service account.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Navigate to Active Directory Group Policies. Set Group Policies to restrict the interactive logon privilege for the User-ID service account. or Navigate to Active Directory Managed Service Accounts. Set Managed Service Accounts to restrict the interactive logon privilege for the User-ID service account.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: paloaltoauthentication
Référence: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 2.6 Ensure that the User-ID service account does not have interactive logon rights