Skip to content

Conversation

@pavelshabanov2025
Copy link

No description provided.

@pavelshabanov2025 pavelshabanov2025 requested a review from a team as a code owner December 3, 2025 05:38
@pavelshabanov2025
Copy link
Author

  • /docs/auditor/10_8/configuration/logonactivity/permissions.md has been changed - the "Log on as a batch job" option has been replaced with "Access this computer from the network" in Step 1
  • /docs/auditor/10_8/configuration/logonactivity/networkaccess.md has been added.

Copy link

@andrey-isakov-nwx andrey-isakov-nwx left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why have many files out of docs/auditor/10.8/configuration/logonactivity
been touched?

description: "Configure Access this computer from the network Policy"
sidebar_position: 70
---
Perform this procedure only if the account selected for data collection is not a member of the Domain Admins group.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. Guided by the principal of providing the least possible privileges, I wouldn't write about Domain Admins as if it was a default option for data collection account. I suppose it looks fine in test environments, but a bit terrifying in a real one.
  2. Are we positive that Domain Admins are provided this right? What if it was revoked for domain admins for some reason?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants