Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-252447 | APPL-12-000016 | SV-252447r816155_rule | High |
Description |
---|
Distinct user account databases on each separate system cause problems with username and password policy enforcement. Most approved directory services infrastructure solutions allow centralized management of users and passwords. |
STIG | Date |
---|---|
Apple macOS 12 (Monterey) Security Technical Implementation Guide | 2023-02-13 |
Check Text ( C-55903r816153_chk ) |
---|
If the system is using a mandatory Smart Card Policy, this is Not Applicable. To determine if the system is integrated to a directory service, run the following command: /usr/bin/dscl localhost -list . | /usr/bin/grep "Active Directory" If no results are returned, this is a finding. |
Fix Text (F-55853r816154_fix) |
---|
Integrate the system into an existing directory services infrastructure. |