The default Builtin\Administrators group must be removed from the SCOM Administrators Role Group.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-237437 | SRG-APP-000080-NDM-000345 | SCOM-IA-000003 | SV-237437r643957_rule | 2021-03-15 | 1 |
| Description |
|---|
| SCOM servers with default well-known operating system groups defined the SCOM Administrators Global Group may allow a local administrator access to privileged SCOM access. |
| ℹ️ Check |
|---|
| Review the SCOM Administrators Global Group and verify that the Built-in\Administrators Group is not a member. If the Built-in\Administrators group is a member, this is a finding. |
| ✔️ Fix |
|---|
| Remove the Built-in\Administrators group from the SCOM Administrators Role Group. |