TMA-SHAREPOINT-FARM-ADMINS
Ensure Farm Administrators group membership is restricted
Açıklama
Farm Administrators have full control over every server and site collection; membership must be limited to named administrators.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Central Administration > Security > Manage the farm administrators group: confirm only approved named admin accounts [and BUILTIN\Administrators if required] are members; no users, broad groups or service accounts other than the farm account. Also check Get-SPShellAdmin output and the local Administrators group on each farm server.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Remove unapproved members from the Farm Administrators group in Central Administration and with Remove-SPShellAdmin; document approved membership.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- sharepointaccounts
- Referans
- CIS Microsoft SharePoint Server Benchmark - Service accounts / Farm Administrators group (verify section number for your release)