search

cyberark / CYBRHardeningCheck

A utility to check CyberArk component servers hardening status
GNU General Public License v3.0
53 stars 25 forks source link

Script doesn't detect the security configuration GAP as defined in the inf files #96

Open ediulia opened 2 years ago

ediulia commented 2 years ago

Summary

We have customized Vault hardening with RDP and WINRM services enabled And also the policy SeRemoteInteractiveLogonRight = *S-1-5-32-544

The script doesn't detect the gap compared to Windows2019Security.inf file

Steps to Reproduce

  1. Enable the RDP and WINRM services on the vault
  2. change any values in Windows2019Security.inf file
  3. run the hardening check script again. no services checked

Expected Results

The report should show the enabled services as not defined to be enabled in Windows2019Security.inf

Actual Results

all good

Reproducible

Version/Tag number

the latest from the Vault_enhancement branch

Environment setup

local lab vault or any customer vault