Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

In Active Directory Users and Computers open the SharePoint setup account > Member Of. Verify it is a member of Domain Users only, and that no other delegated rights, services or permissions are assigned to it.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Remove the setup account from every AD group other than Domain Users and remove any additional delegated permissions.