Details

This subcategory reports changes to objects in Active Directory Domain Services (AD DS).

Solution

Make sure ‘DS Access: Directory Service Changes’ is set to no auditing.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/17

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Windows.

References

• 800-53|AU-12c.

Source

• Tenable.com/audits