Skip to main content
Version: 3.0.0-preview

AD-GPOREP-04 - GPOs without authenticated users details should be retrievable

Michael Soule
Contributed by Michael SouleAll contributors →

Overview​

Control Type​

Detective

Test-MtAdGpoNoAuthenticatedUsersDetails​

Returns details of GPO reports without Authenticated Users.

Why This Test Matters​

  • Detective control: detects GPO reports missing Authenticated Users which could widen access.

Security Recommendation​

  • Review GPOs missing Authenticated Users to ensure access controls are appropriate.

How the Test Works​

  • Obtains GPO state, selects reports lacking HasAuthenticatedUsers or with false value, and renders a details table.
  • Test-MtAdGpoNoAuthenticatedUsersCount.

Test Metadata​

FieldValue
Test IDAD-GPOREP-04
SeverityMedium
SuiteActive Directory
CategoryActive Directory - GPO State
PowerShell testTest-MtAdGpoNoAuthenticatedUsersDetails
ServicesActiveDirectory
TagsAD, AD-GPOREP-04, AD.GPOState

Source​