CCE-93333-3| Platform: cpe:/o:microsoft:windows_server_2019 | Date: (C)2020-09-22 (M)2023-07-04 |
Specify dynamic registration of the DC Locator DNS Records
If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemNet LogonDC Locator DNS Records!Specify dynamic registration of the DC Locator DNS Records
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftNetlogonParameters!UseDynamicDns
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.0 | Attack Vector: ADJACENT_NETWORK |
| Exploit Score: 1.6 | Attack Complexity: HIGH |
| Impact Score: 3.4 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: LOW |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:56352 |
