Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Script doesn't detect the security configuration GAP as defined in the inf files #96

Open
1 task
ediulia opened this issue Dec 10, 2021 · 0 comments
Open
1 task

Comments

@ediulia
Copy link
Contributor

ediulia commented Dec 10, 2021

Summary

We have customized Vault hardening with RDP and WINRM services enabled
And also the policy
SeRemoteInteractiveLogonRight = *S-1-5-32-544

The script doesn't detect the gap compared to Windows2019Security.inf file

Steps to Reproduce

  1. Enable the RDP and WINRM services on the vault
  2. change any values in Windows2019Security.inf file
  3. run the hardening check script again. no services checked

Expected Results

The report should show the enabled services as not defined to be enabled in Windows2019Security.inf

Actual Results

all good

Reproducible

  • Always

Version/Tag number

the latest from the Vault_enhancement branch

Environment setup

local lab vault or any customer vault

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

2 participants