General discussion

  • Creator
    Topic
  • #2175530

    Security account on servers?

    Locked

    by dstratton ·

    Does any one have any feedback/ideas on creating a Security account on servers for the purpose of using scanning tools?
    Thank you

All Comments

  • Author
    Replies
    • #3352016

      Reply To: Security account on servers?

      by bfilmfan ·

      In reply to Security account on servers?

      Good question. I always recommend that you create a security group and assign that group the permissions that are required (most of the applications require local administrator-level privileges).

      Create your domain security accounts and place them in the security group with permissions. Then create a GPO which limits membership in the Restricted Security Group.

      Pretty good article here telling you how to accomplish that with Active Directory’s GPO:

      http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Viewing 0 reply threads