1.3.19 Audit Policy: DS Access: Directory Service Changes - Member Server

Information

This control defines whether the audit is activated when changes in Active Directory Domain Services (AD DS) occur.

Solution

Make sure 'Audit Policy: DS Access: Directory Service Changes' is configured to 'No Auditing' or 'Success' or 'Success and Failure' or 'Failure'.

See Also

https://workbench.cisecurity.org/files/10

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12, CCE|CCE-2445-5, CCE|CCE-2635-1

Plugin: Windows

Control ID: c811f16473bf637a113bfff821209e321330f1f83ffedf7be86d2882fc7ded41