Topic

Microsoft Active Directory Domain Services security group memberships

Applicable to

Non Classified, Official, Protected, Secret, Top Secret

History

Sep 2024

The Domain Computers security group is not a member of any privileged or highly-privileged security groups.

A new control was added recommending that the Domain Computers security group not be a member of any privileged or highly-privileged security groups.