What should be the solution for RSAT hidden danger?

gh X 255

Ordinary domain users can access the server via RSAT, which leads to complete exposure of server information and constitutes a serious security risk, what is the simplest solution?

Thank you for your answer.

1 answer

Jing Zhou 7,185 Reputation points Microsoft Vendor

2024-08-29T02:15:10.0433333+00:00

Hello,

Thank you for posting in Q&A forum.

To achieve this purpose, you can create a security group especially for RSAT Users. After your selection can add authorized users to this group and deny access to RSAT tools for other users by removing them from this group.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best regards，

Jill Zhou

If the Answer is helpful, please click "Accept Answer" and upvote it.
Please sign in to rate this answer.
gh X 255 Reputation points

2024-08-29T08:59:15.69+00:00

tests conducted in Hyper-V.

Ordinary domain accounts can connect to domain controllers via RSAT's “Active Directory Users and Computers”. And in the group policy of the domain controller, making settings related to the remote login service does not prevent regular domain users from connecting to the domain controller via RSAT's Active Directory Users and Computers.

Since I don't have two physical machines to authenticate with at the moment, I'm wondering if this won't happen in a physical machine environment, right? Thank you very much for your answer!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

What should be the solution for RSAT hidden danger?

1 answer

Your answer