[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Domain controller: Allow server operators to schedule tasks

ID: oval:org.secpod.oval:def:23033Date: (C)2015-01-07   (M)2023-07-31
Class: COMPLIANCEFamily: windows




This policy setting determines whether members of the Server Operators group are allowed to submit jobs by means of the AT schedule facility. The impact of this policy setting configuration should be small for most organizations. Users, including those in the Server Operators group, will still be able to create jobs by means of the Task Scheduler Wizard, but those jobs will run in the context of the account with which the user authenticates when they set up the job. Note: An AT Service Account can be modified to select a different account rather than the LOCAL SYSTEM account. To change the account, open System Tools, click Scheduled Tasks, and then click Accessories folder. Then click AT Service Account on the Advanced menu. This policy setting determines whether members of the Server Operators group are allowed to submit jobs by means of the AT schedule facility. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options!Domain controller: Allow server operators to schedule tasks (2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa!SubmitControl

Platform:
Microsoft Windows Server 2012 R2
Reference:
CCE-37848-9
CPE    1
cpe:/o:microsoft:windows_server_2012::r2:x64
CCE    1
CCE-37848-9
XCCDF    4
xccdf_org.secpod_benchmark_NIST_800_53_r4_Windows_2012_R2
xccdf_org.secpod_benchmark_PCI_Windows_2012_R2
xccdf_org.secpod_benchmark_ISO27001_Windows_2012_R2
xccdf_org.secpod_benchmark_general_Windows_2012_R2
...

© SecPod Technologies