Topic

Microsoft Active Directory Domain Services security group memberships

Applicable to

Non Classified, Official, Protected, Secret, Top Secret

History

Mar 2023

The Pre-Windows 2000 Compatible Access security group does not contain user accounts.

Two new controls were added covering the hardening of Microsoft AD DS security group memberships. [ISM-1845, ISM-1846]