CCE-36456-2Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Turn on the Windows to NIS password synchronization for users that have been migrated to Active Directory
This policy setting allows an administrator to turn on the Windows to Network Information Service (NIS) password synchronization for UNIX-based user accounts that have been migrated to Active Directory Domain Services.
If you enable this policy setting, all affected computers that are running Password Synchronization automatically update a user's UNIX-based account password when the password is changed in the Windows environment, if the user account has been migrated to Active Directory Domain Services.
If you disable or do not configure this policy setting, individual computers that are running Password Synchronization synchronize changes to UNIX-based user account passwords based upon how the 'Windows to NIS (Active Directory) password synchronization' setting on the Configuration tab of the Password Synchronization Properties dialog box is configured.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsPassword Synchronization!Turn on the Windows to NIS password synchronization for users that have been migrated to Active Directory
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsPswdSync!SNISPasswordSyncEnable
CCSS Severity: | CCSS Metrics: |
CCSS Score : 6.6 | Attack Vector: LOCAL |
Exploit Score: 1.8 | Attack Complexity: LOW |
Impact Score: 4.7 | Privileges Required: LOW |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: LOW |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27495 |