Detections
Analytics

1.17 WN11-00-000075

Information

Only accounts responsible for the backup operations must be members of the Backup Operators group.

GROUP ID: V-253270
RULE ID: SV-253270r991589

Backup Operators are able to read and write to any file in the system, regardless of the rights assigned to it. Backup and restore rights permit users to circumvent the file access restrictions present on NTFS disk drives for backup and restore purposes. Members of the Backup Operators group must have separate logon accounts for performing backup duties.

Solution

Create separate accounts for backup operations for users with this privilege.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-253270r991589_rule, STIG-ID|WN11-00-000075, Vuln-ID|V-253270

Plugin: Windows

Control ID: c63521e6a1498077206cf3b5fbd34bad9fd7d136dacca1caeeddca349cdeec52