Topic

Microsoft Active Directory Domain Services security group memberships

Applicable to

all

History

Sep 2024

The number of user accounts that are members of the Domain Admins, Enterprise Admins or other highly-privileged security groups is minimised.

A new control was added recommending that the number of user accounts that are members of the Domain Admins, Enterprise Admins or other highly-privileged security groups be minimised.