General discussion

Locked

Security account on servers?

By dstratton ·
Does any one have any feedback/ideas on creating a Security account on servers for the purpose of using scanning tools?
Thank you

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to Security account on serve ...

Good question. I always recommend that you create a security group and assign that group the permissions that are required (most of the applications require local administrator-level privileges).

Create your domain security accounts and place them in the security group with permissions. Then create a GPO which limits membership in the Restricted Security Group.

Pretty good article here telling you how to accomplish that with Active Directory's GPO:

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Back to Security Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums