The Tanium Application Server must be configured with a connector to sync to Microsoft Active Directory for account management functions.

From Tanium 6.5 Security Technical Implementation Guide

Associated with: CCI-000015

SV-81487r1_rule The Tanium Application Server must be configured with a connector to sync to Microsoft Active Directory for account management functions.

Vulnerability discussion

By restricting access to the Tanium Server to only Microsoft Active Directory, user accounts and related permissions can be strictly monitored. Account management will be under the operational responsibility of the System Administrator for the Windows Operation System Active Directory.

Check content

Access the Tanium Module server interactively and log on as an Administrator. Click “Start” and click the down arrow to view Apps. Find "Tanium Connection Manager", right-click on the icon and choose to Run-as administrator and confirm at the User Account Control window prompt. In the "Tanium Connection Manager" configuration window, select the "Connector Plug-Ins" tab. Verify a plug-in exists for the "Type of Active Directory Sync". If no plug-in exists with the "Type of Active Directory Sync", this is a finding.

Fix text

Access the Tanium Module server interactively and log on as an Administrator. Click “Start” and click the down arrow to view Apps. Find Tanium Connection Manager, right-click on the icon and choose to Run-as administrator and confirm. In the Tanium Connection Manager configuration window, select the "Connector Plug-Ins" tab. Click the + to add a connector For Connector Type:, choose Active Directory Sync Assign a unique Connector Name: Click “OK”. Configure Active Directory and configuration tabs with variables according to site's Active Directory configuration.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.