Users in the VirtualCenter Server Windows Administrators group are not documented.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-15876 | ESX0770 | SV-16817r1_rule | ECSC-1 | Low |
| Description |
|---|
| Users who are members of the Windows administrators group on the VirtualCenter server are granted the same access rights as any user assigned to the VirtualCenter administrator role. These users need to be documented to ensure only authorized users are members of this group. |
| STIG | Date |
|---|---|
| VMware ESX 3 Policy | 2016-05-03 |
Details
| Check Text ( C-16234r1_chk ) |
|---|
| Request a copy of the document specifying users assigned to the Windows Administrators group on the VirtualCenter Server. If no documentation exists, this is a finding. Compare the documented users to those listed in the group on the server. If any discrepancies exist, this is a finding. |
| Fix Text (F-15836r1_fix) |
|---|
| Document all users in the Windows Administrators group. |