動作
專案資訊 #1080
已結束專案資訊 #1064: 2025-PenTest
Presence of user principals in Schema Admins group
狀態:
Closed-關閉
優先權:
Normal
被分派者:
周益利
分類:
-
開始日期:
2025-08-01
完成日期:
2025-12-31
完成百分比:
100%
預估工時:
概述
bookmark20250528012341779511785327 Presence of user principals in Schema Admins group "A non-empty Schema Admins group poses a significant risk as it grants extensive permissions to modify the Active Directory schema, potentially leading to accidental or malicious changes that can disrupt the entire domain.
" Consider emptying the default Active Directory groups “Schema Admins” and any similar privileged group as mentioned in Microsoft’s best practices
檔案
動作