The native management group

critical

describe

For privileged group in Active Directory, only in rare cases, only it is necessary to add an account in the default management group.Carefully review the group membership, to ensure its rationality.

The solution

The privilege management to minimize the number of group members.

See also

Securing ring Access

Detailed information

The name of the:The native management group

Code name:C - NATIVE - ADM - GROUP - MEMBERS

severity:Critical

MITRE ATT&CK information:

Strategy:TA0004

Technology:T1078

Baidu
map