Details

This subcategory reports each event of application group management on a computer, such as when an application

group is created, changed, or deleted or when a member is added to or removed from an application group.

Solution

Make sure ‘Account Management: Application Group Management’ is set to no auditing.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/17

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Windows.

References

• 800-53|AU-12c.
• CSCv6|16

Source

• Tenable.com/audits