Group Membership Enforcement

Owned by Anonymous
Last updated: Jun 10, 2013 by AnonymousVersion comment
1 min read

What is Group Membership Enforcement?

Group Membership Enforcement is a control for:

  • Policy compliance
  • Regulatory compliance

Group Membership Enforcement is a security control to prevent insider and external abuse. It is a security "Best Practice" to eliminate unnecessary privileged accounts. Although Group Membership Enforcement can be applied to any group, however 98% of the time it is applied to the Administrators Group. Group Membership Enforcement ensures membership to the Administrators Group is enforced at all times.

Before enforcing groups and users, you must first must run the Local User Inventory Policy . Running the policy discovers the resources that you can work with. 

Always Include the Built-In Administrator

Always include the Built-In Administrator Account into the Local Administrator Group!