[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-93308-5

Platform: cpe:/o:microsoft:windows_server_2019Date: (C)2020-09-22   (M)2023-07-04



User Access Logging Service This service logs unique client access requests in the form of IP addresses and user names of installed products and roles on the local server. This information can be queried via Powershell by administrators needing to quantify client demand of server software for offline Client Access License (CAL) management. If the service is disabled client requests will not be logged and will not be retrievable via Powershell queries. Stopping the service will not effect query of historical data (see supporting documentation for steps to delete historical data). The local system administrator must consult his or her Windows Server license terms to determine the number of CALs that are required for the server software to be appropriately licensed; use of the UAL service and data does not alter this obligation.


Parameter:

[manual/disable/automatic]


Technical Mechanism:

(1) GPO: Computer ConfigurationWindows SettingsSecurity SettingsSystem Services!User Access Logging Service (2) REG: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesUALSVC!Start

CCSS Severity:CCSS Metrics:
CCSS Score : 3.7Attack Vector: NETWORK
Exploit Score: 2.2Attack Complexity: HIGH
Impact Score: 1.4Privileges Required: NONE
Severity: LOWUser Interaction: NONE
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NScope: UNCHANGED
 Confidentiality: LOW
 Integrity: NONE
 Availability: NONE
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:56327


OVAL    1
oval:org.secpod.oval:def:56327
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_2019

© SecPod Technologies