UCF STIG Viewer Logo

Members of the Backup Operators group must be documented.


Overview

Finding ID Version Rule ID IA Controls Severity
V-225245 WN12-00-000009-01 SV-225245r569185_rule Medium
Description
Backup Operators are able to read and write to any file in the system, regardless of the rights assigned to it. Backup and restore rights permit users to circumvent the file access restrictions present on NTFS disk drives for backup and restore purposes. Visibility of members of the Backup Operators group must be maintained.
STIG Date
Microsoft Windows Server 2012/2012 R2 Member Server Security Technical Implementation Guide 2022-03-01

Details

Check Text ( C-26944r471077_chk )
If no accounts are members of the Backup Operators group, this is NA.

Any accounts that are members of the Backup Operators group, including application accounts, must be documented with the ISSO. If documentation of accounts that are members of the Backup Operators group is not maintained this is a finding.
Fix Text (F-26932r471078_fix)
Create the necessary documentation that identifies the members of the Backup Operators group.