Host must have an accurate Exception Users list

OrtaDüzey 1Manuel incelemevmware

Açıklama

Establishing an accurate Exception Users list is essential for managing user privileges during lockdown mode. Users on this list retain their privileges, making it imperative to include only those necessary for direct host access like service accounts for third-party solutions. Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

To verify the membership of the "Exception Users" list, perform the following in the vSphere Web Client: 1. Select the host. 2. Click on Configure then expand System and select Security Profile. 3. Under Lockdown Mode view and verify the list of Exception Users for accuracy.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

To correct the membership of the Exception Users list, perform the following in the vSphere Web Client: 1. Select the host. 2. Click on Configure then expand System and select Security Profile. 3. Select Edit next to Lockdown Mode. 4. Click on Exception Users. 5. Add or delete users as appropriate. 6. Click OK.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: vmwareesximanagement
Referans: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 3.19 Host must have an accurate Exception Users list