Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Members of the Backup Operators group must be documented.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1168 | WN12-00-000009-01 | SV-52156r2_rule | Medium |
| Description |
|---|
| Backup Operators are able to read and write to any file in the system, regardless of the rights assigned to it. Backup and restore rights permit users to circumvent the file access restrictions present on NTFS disk drives for backup and restore purposes. Visibility of members of the Backup Operators group must be maintained. |
| STIG | Date |
|---|---|
| Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide | 2019-01-16 |
Details
| Check Text ( C-46951r2_chk ) |
|---|
| If no accounts are members of the Backup Operators group, this is NA. Any accounts that are members of the Backup Operators group, including application accounts, must be documented with the ISSO. If documentation of accounts that are members of the Backup Operators group is not maintained this is a finding. |
| Fix Text (F-45181r1_fix) |
|---|
| Create the necessary documentation that identifies the members of the Backup Operators group. |