IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
Freely-defined user groups
With the help of freely-defined user groups, it is possible to map the
organisational structure of an institution to the rights structure. For each
organisational unit, e.g. for every project or every department, a group can be
created which contains all the users of the organisational unit. The groups are
then granted the necessary permissions to resources. If project groups are
created within the institution for temporary tasks, they can be mapped to a
suitable freely-defined group which contains all the members of the project
group.
When freely-defined user groups are created on the primary domain
controller, it must be specified whether they are local or global groups.
Additional controls:
- Has a strategy been laid down for allocating users among the pre-defined
groups in accordance with the rights required by these users?
- Is this strategy documented?
- Are regular checks carried out to determine whether the allocation of the
users to the groups still corresponds to the current tasks of these users?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000