The default Builtin\Administrators group must be removed from the SCOM Administrators Role Group.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-237437 | SRG-APP-000080-NDM-000345 | SCOM-IA-000003 | SV-237437r643957_rule | 2021-03-15 | 1 |
Description
SCOM servers with default well-known operating system groups defined the SCOM Administrators Global Group may allow a local administrator access to privileged SCOM access.
ℹ️ Check
Review the SCOM Administrators Global Group and verify that the Built-in\Administrators Group is not a member.
If the Built-in\Administrators group is a member, this is a finding.
✔️ Fix
Remove the Built-in\Administrators group from the SCOM Administrators Role Group.