Title

Users in the VirtualCenter Server Windows Administrators group are not documented. (Cat III impact)

Discussion

Users who are members of the Windows administrators group on the VirtualCenter server are granted the same access rights as any user assigned to the VirtualCenter administrator role. These users need to be documented to ensure only authorized users are members of this group.

Check Content

Request a copy of the document specifying users assigned to the Windows Administrators group on the VirtualCenter Server. If no documentation exists, this is a finding. Compare the documented users to those listed in the group on the server. If any discrepancies exist, this is a finding.

Fix Text

Document all users in the Windows Administrators group.

Additional Identifiers

Rule ID: SV-16817r1_rule

Vulnerability ID: V-15876

Group Title: Users are not documented correctly

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.