[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-3322-5

Platform: win2k3Date: (C)2010-04-20   (M)2017-07-31



The "access this computer from the network" user right should be assigned to the correct accounts.


Parameter: (1) set of accounts


Technical Mechanism: (1) defined by the SeNetworkLogonRight setting in Local or Group Policy (2) Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\

References:

Resource IdReference
Old v4 CCE IDCCE-532
Microsoft Security Guide for Windows Server 2003Table 4.2 Access this computer from the network: Administrators, Authenticated Users, Enterprise Domain Controllers (High Security); Legacy Client and Enterprise Client are not defined
Center for Internet Security Windows Server 20034.2.1 Access this computer from the network: Not Defined; Administrators, Authenticated Users, Enterprise Domain Controllers (Specialized Security)
DISA Stig for Windows 20035.1 User Rights: (4.015: CAT I) Built-in Guest account, Everyone group, guests group, and Domain Guests group DO NOT have the right to "access this computer from the network"
Microsoft Windows Server 2003 Security Guide, version April 26, 2006Table 4.11 User Rights Assignments Setting Recommendations: Access this computer from the network, not defined (Legacy and Enterprise), Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS (Specialized Security) Table 5.4 Recommended User Rights Assignments Settings: Access this computer from the network
Microsoft Online Documentationhttp://technet.microsoft.com/en-us/library/cc740196.aspx
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:8389
BITS Shared Assessments SIG v6.0BITS Shared Assessments SIG v6.0
Jericho ForumJericho Forum
HIPAA/HITECH ActHIPAA/HITECH Act
FedRAMP Security Controls(Final Release Jan 2012)--LOW IMPACT LEVEL--FedRAMP Security Controls(Final Release Jan 2012)--LOW IMPACT LEVEL--
ISO/IEC 27001-2005ISO/IEC 27001-2005
COBIT 4.1COBIT 4.1
GAPP (Aug 2009)GAPP (Aug 2009)
NERC CIPNERC CIP
NIST SP800-53 R3NIST SP800-53 R3 AC-3
NIST SP800-53 R3NIST SP800-53 R3 CM-6
PCIDSS v2.0PCIDSS v2.0
FedRAMP Security Controls(Final Release Jan 2012)--MODERATE IMPACT LEVEL--FedRAMP Security Controls(Final Release Jan 2012)--MODERATE IMPACT LEVEL--
BITS Shared Assessments AUP v5.0BITS Shared Assessments AUP v5.0


CPE    13
cpe:/o:microsoft:windows_server_2003::gold:itanium
cpe:/o:microsoft:windows_server_2003::sp1:x86
cpe:/o:microsoft:windows_server_2003::gold:x86
cpe:/o:microsoft:windows_server_2003::sp2:x86
...
OVAL    1
oval:org.secpod.oval:def:8389
XCCDF    4
xccdf_org.secpod_benchmark_cip_std_ver3_Windows_2003
xccdf_nist_benchmark_Windows_server_2003
xccdf_hipaa_benchmark_Windows__server_2003
xccdf_org.secpod_benchmark_Windows_2003
...

© 2013 SecPod Technologies