Topic

Microsoft Active Directory Domain Services security group memberships

Applicable to

all

History

Mar 2023

Privileged user accounts are members of the Protected Users security group.

An existing control covering ‘privileged accounts’ being members of the Protected Users security group was amended to ‘privileged user accounts’ and moved from the authentication hardening section to the server application hardening section of the Guidelines for System Hardening.

Oct 2020

Privileged accounts are members of the Protected Users security group.

Security control 1620 was introduced to reflect the recommendation within the ACSC’s Security Administration publication that privileged accounts be members of the Protected Users security group.