Active Directory Forest Security Technical Implementation Guide (STIG)

Version: 2

Checked	Name	Title
☐	SV-30998r3_rule	Changes to the AD schema must be subject to a documented configuration management process.
☐	SV-9052r2_rule	Anonymous Access to AD forest data above the rootDSE level must be disabled.
☐	SV-9054r3_rule	The Windows Time Service on the forest root PDC Emulator must be configured to acquire its time from an external time source.
☐	SV-30999r4_rule	Update access to the directory schema must be restricted to appropriate accounts.
☐	SV-87487r1_rule	Membership to the Schema Admins group must be limited.