CCE-18800-3| Platform: win7 | Date: (C)2012-05-18 (M)2022-10-10 |
The "Check Administrator Group Membership" setting should be configured correctly.
Parameter:
True/False
Technical Mechanism:
(1) Powershell: Get-WmiObject -Class Win32_ComputerSystem to get domain
(2) Powershell: Get-WmiObject -Class Win32_Group -ComputerName
(3) Powershell: Code logic to extract admin list and compare against desired list
(4) If match True else False
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References: | Resource Id | Reference |
|---|
| Microsoft Security Compliance Manager Version 2.5 | Microsoft Tool: Security Compliance Manager (SCM)
Microsoft Baseline: Win7SP1ExtendedDCMChecks 1.0
SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940
Note, use SCM global search and baseline filter to locate settings related to CCE ID |
