Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

In Active Directory Users and Computers open the SharePoint setup account > Member Of. Verify it is a member of Domain Users only, and that no other delegated rights, services or permissions are assigned to it.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Remove the setup account from every AD group other than Domain Users and remove any additional delegated permissions.