Detections
Analytics
WN22-DC-000405 - Windows Server 2022 must be configured for certificate-based authentication for domain controllers.
Information
Active Directory domain services elevation of privilege vulnerability could allow a user rights to the system, such as administrative and other high-level capabilities.Solution
Configure the registry value.Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: SYSTEM\CurrentControlSet\Services\Kdc
Value Name: StrongCertificateBindingEnforcement
Value Type: REG_DWORD
Value: 0x00000001 (1) or 0x00000002 (2)
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2022_V2R8_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2022 STIG v2r8
Category: ACCESS CONTROL
References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-271426r1137691_rule, STIG-ID|WN22-DC-000405, Vuln-ID|V-271426
Plugin: Windows
Control ID: 752fda1695fc530674a35bc6192fbd89b6b9d012238b02d53b12b2411bef31a8