Ensure LSA Protection is configuredID: oval:org.secpod.oval:def:96127 | Date: (C)2023-12-27 (M)2024-01-09 |
Class: COMPLIANCE | Family: windows |
Enable LSA protection. For more information, see http://technet.microsoft.com/en-us/library/dn408187.aspxCounter Measure: Enable and configure this setting.Potential Impact: Some unprotected LSA processes will be unable to function.Fix:(1) GPO: Computer Configuration\Administrative Templates\SCM: Pass the Hash Mitigations\LSA Protection(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa!RunAsPPL
Platform: |
Microsoft Windows Server 2012 |