search

cyberark / CYBRHardeningCheck

A utility to check CyberArk component servers hardening status
GNU General Public License v3.0
53 stars 25 forks source link

Domain users for PSMConnect & PSMAdminConnect #108

Open kyrios123 opened 3 months ago

kyrios123 commented 3 months ago

Summary

The script assumes that PSMConnect and PSMAdminConnect local users are used while domain users configured

Steps to Reproduce

Run the script .\Main.ps1 -Verbose -Debug as explained in the doc Check the SID of these users in the log file -> they corresponds to the PSMConnect & PSMAdminConnect local users instead of the domain accounts configured.

Expected Results

The domain accounts must be used instead of the default local users

Actual Results

Logs show the following message

2024-07-29 08:13:31]    [INFO]  Start verify DisableTheScreenSaverForThePSMLocalUsers
[2024-07-29 08:13:31]   [DEBUG] Get SID value for user: PSMConnect
[2024-07-29 08:13:31]   [DEBUG] User SID: S-1-5-21-1967969204-1792391139-511700813-1005
[2024-07-29 08:13:31]   [VERBOSE]   Starting Compare-PolicyEntry (Disable screen saver,C:\WINDOWS\system32\GroupPolicyUsers\S-1-5-21-1967969204-1792391139-511700813-1005\User\registry.pol,Software\Policies\Microsoft\Windows\Control Panel\Desktop,ScreenSaveActive,1)
[2024-07-29 08:13:31]   [VERBOSE]   Opening Key:'Software\Policies\Microsoft\Windows\Control Panel\Desktop' on Hive:'HKLM:'
[2024-07-29 08:13:31]   [ERROR] Error comparing local group policy 'Disable screen saver'. Error: Source:; Message: Get-Reg: Registry path HKLM:\Software\Policies\Microsoft\Windows\Control Panel\Desktop does not exist
[2024-07-29 08:13:31]   [DEBUG] Get SID value for user: PSMAdminConnect
[2024-07-29 08:13:31]   [DEBUG] User SID: S-1-5-21-1967969204-1792391139-511700813-1006
[2024-07-29 08:13:31]   [VERBOSE]   Starting Compare-PolicyEntry (Disable screen saver,C:\WINDOWS\system32\GroupPolicyUsers\S-1-5-21-1967969204-1792391139-511700813-1006\User\registry.pol,Software\Policies\Microsoft\Windows\Control Panel\Desktop,ScreenSaveActive,1)
[2024-07-29 08:13:31]   [VERBOSE]   Opening Key:'Software\Policies\Microsoft\Windows\Control Panel\Desktop' on Hive:'HKLM:'
[2024-07-29 08:13:31]   [ERROR] Error comparing local group policy 'Disable screen saver'. Error: Source:; Message: Get-Reg: Registry path HKLM:\Software\Policies\Microsoft\Windows\Control Panel\Desktop does not exist
[2024-07-29 08:13:31]   [INFO]  Finish verify DisableTheScreenSaverForThePSMLocalUsers

Reproducible

Version/Tag number

Environment setup

PSM is running on a VM

Additional Information

N/A