STIGUI
V-237437CAT II — Medium severitySV-237437r643957_rule

The default Builtin\Administrators group must be removed from the SCOM Administrators Role Group.

Rule version SCOM-IA-000003 · STIG v1 · 2021-03-15

Discussion

SCOM servers with default well-known operating system groups defined the SCOM Administrators Global Group may allow a local administrator access to privileged SCOM access.

Check

Review the SCOM Administrators Global Group and verify that the Built-in\Administrators Group is not a member.

If the Built-in\Administrators group is a member, this is a finding.

Fix

Remove the Built-in\Administrators group from the SCOM Administrators Role Group.

Identifiers

Group ID
V-237437
Group title
SRG-APP-000080-NDM-000345
Rule ID
SV-237437r643957_rule
Check ID
C-40656r643955_chk
Fix ID
F-40619r643956_fix