Topic

Microsoft Active Directory Domain Services account hardening

Applicable to

Non Classified, Official, Protected, Secret, Top Secret

History

Sep 2024

User accounts are checked at least weekly for the presence of the sIDHistory attribute.

A new control was added recommending that user accounts be checked at least weekly for the presence of the sIDHistory attribute.