Detections
Analytics

Accounts Using a Pre-Windows 2000 Compatible Access Control

high

Language:

Description

Compatibility with legacy systems can decrease the security level of the whole Active Directory.

Solution

Remove some members of the Pre-Windows 2000 Compatible Access group.

See Also

Pre-Windows 2000 Compatible Access

Pre-Windows 2000 Compatible Access Group Object

Security Identifiers from Windows Server 2003

Indicator Details

Name: Accounts Using a Pre-Windows 2000 Compatible Access Control

Codename: C-PRE-WIN2000-ACCESS-MEMBERS

Severity: High

MITRE ATT&CK Information:

Tactics: TA0043

Techniques: T1592