Microsoft SharePoint Server
TMA-SHAREPOINT-2.3
Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.
TinggiLevel 1Tinjauan manualsharepoint
Deskripsi
The SharePoint setup account must be configured with the minimum privileges in Active Directory. Manual review.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
In Active Directory Users and Computers open the SharePoint setup account > Member Of. Verify it is a member of Domain Users only, and that no other delegated rights, services or permissions are assigned to it.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Remove the setup account from every AD group other than Domain Users and remove any additional delegated permissions.
Properti
- Sistem operasi
- Apa saja
- Tag
- sharepointservice-accountsleast-privilege
- Referensi
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.3 Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.