動作
專案資訊 #1080
進行中專案資訊 #1064: 2025-PenTest
Presence of user principals in Schema Admins group
開始日期:
2025-08-01
完成日期:
2025-12-31 (逾期 25 天)
完成百分比:
100%
預估工時:
概述
bookmark20250528012341779511785327 Presence of user principals in Schema Admins group "A non-empty Schema Admins group poses a significant risk as it grants extensive permissions to modify the Active Directory schema, potentially leading to accidental or malicious changes that can disrupt the entire domain.
" Consider emptying the default Active Directory groups “Schema Admins” and any similar privileged group as mentioned in Microsoft’s best practices
檔案
是由 益利 周 於 約 2 個月 前更新
- 檔案 clipboard-202511271821-z15p2.png clipboard-202511271821-z15p2.png 已新增
- 狀態 從 New-新增 變更為 Resolved-解决
- 完成百分比 從 0 變更為 100
1.清空 Schema Admins 群組成員資格
群組中無成員
動作