Palo Alto Networks
TMA-PALOALTO-2.6
Ensure that the User-ID service account does not have interactive logon rights
Descrição
Restrict the User-ID service account from interactively logging on to systems in the Active Directory domain.
Como é verificado
Método de auditoria: Revisão manual
Navigate to Active Directory Group Policies. Verify that Group Policies restricts the interactive logon privilege for the User-ID service account. or Navigate to Active Directory Managed Service Accounts. Verify that Managed Service Accounts restricts the interactive logon privilege for the User-ID service account.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Navigate to Active Directory Group Policies. Set Group Policies to restrict the interactive logon privilege for the User-ID service account. or Navigate to Active Directory Managed Service Accounts. Set Managed Service Accounts to restrict the interactive logon privilege for the User-ID service account.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- paloaltoauthentication
- Referência
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 2.6 Ensure that the User-ID service account does not have interactive logon rights