動作
專案資訊 #1080
進行中專案資訊 #1064: 2025-PenTest
Presence of user principals in Schema Admins group
開始日期:
2025-08-01
完成日期:
2025-12-31 (逾期 25 天)
完成百分比:
100%
預估工時:
概述
bookmark20250528012341779511785327 Presence of user principals in Schema Admins group "A non-empty Schema Admins group poses a significant risk as it grants extensive permissions to modify the Active Directory schema, potentially leading to accidental or malicious changes that can disrupt the entire domain.
" Consider emptying the default Active Directory groups “Schema Admins” and any similar privileged group as mentioned in Microsoft’s best practices
檔案
動作