Ensure 'unique application pools' is set for sites

SedangLevel 1Otomatisiis

Deskripsi

Application Pool Identities allows Application Pools to be run under unique accounts without the need to create and manage local or domain accounts. It is recommended that all Sites run under unique, dedicated Application Pools. Fails when two or more sites share the same application pool. PowerShell 5.1 with the WebAdministration module; run elevated.

Cara pemeriksaan

Metode audit: Perintah shell

shell

Import-Module WebAdministration -ErrorAction Stop; $bad = @(Get-Website | Group-Object applicationPool | Where-Object { $_.Count -gt 1 }); if ($bad.Count -eq 0) { 'compliant' } else { 'noncompliant' }

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Create a dedicated pool per site and assign it: Set-ItemProperty -Path 'IIS:\Sites\<site>' -Name applicationPool -Value <pool>.

Properti

Sistem operasi: Apa saja
Tag: iisisolation
Referensi: CIS Microsoft IIS 10 Benchmark v1.2.1 - 1.5 Ensure 'unique application pools' is set for sites

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target iis