Topic

Microsoft Active Directory Domain Services account hardening

Applicable to

all

History

Sep 2024

The Domain Computers security group does not have write or modify permissions to any Microsoft Active Directory objects.

A new control was added recommending that the Domain Computers security group not have write or modify permissions to any Microsoft Active Directory objects.