Microsoft SharePoint Server
TMA-SHAREPOINT-2.3
Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.
高等級 1人工審核sharepoint
說明
The SharePoint setup account must be configured with the minimum privileges in Active Directory. Manual review.
檢查方式
稽核方法: 人工審核
此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。
In Active Directory Users and Computers open the SharePoint setup account > Member Of. Verify it is a member of Domain Users only, and that no other delegated rights, services or permissions are assigned to it.
修補方式
修補方法: 操作指南或基礎設施修補檔
Remove the setup account from every AD group other than Domain Users and remove any additional delegated permissions.
屬性
- 作業系統
- 不限
- 標籤
- sharepointservice-accountsleast-privilege
- 參考資料
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.3 Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.