Domain Without Computer-Hardening GPOs

Microsoft places emphasis on maintaining backward compatibility in Active Directory infrastructure, which means that it cannot enable all hardening features.

Enable hardening GPOs to protect at least privileged users, specifically by disabling obsolete protocols to prevent attackers from exploiting them to elevate their privileges on the Active Directory.

Name: Domain Without Computer-Hardening GPOs

Codename: C-GPO-HARDENING

Severity: Medium

Type: Active Directory Indicator of Exposure