CCE-37149-2| Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Turn on extensive logging for Password Synchronization
This policy setting allows an administrator to turn on extensive logging for Password Synchronization.
If you enable this policy setting, all affected computers that are running Password Synchronization log intermediate steps for password synchronization attempts.
If you disable or do not configure this policy setting, individual computers that are running Password Synchronization log steps of password synchronization attempts based upon how the 'Enable extensive logging' setting on the Configuration tab of the Password Synchronization Properties dialog box is configured.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsPassword Synchronization!Turn on extensive logging for Password Synchronization
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsPswdSync!LoggingLevel
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 6.3 | Attack Vector: NETWORK |
| Exploit Score: 2.8 | Attack Complexity: LOW |
| Impact Score: 3.4 | Privileges Required: LOW |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: LOW |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:27834 |
