Topic

Microsoft Active Directory Domain Services security group memberships

Applicable to

Non Classified, Official, Protected, Secret, Top Secret

History

Mar 2023

When a user account is disabled, it is removed from all security group memberships.

Two new controls were added covering the hardening of Microsoft AD DS security group memberships. [ISM-1845, ISM-1846]