← Back to Apple macOS 13 (Ventura) Security Technical Implementation Guide

V-257153

CAT I (High)

The macOS system must be integrated into a directory services infrastructure.

Rule ID

SV-257153r991589_rule

STIG

Apple macOS 13 (Ventura) Security Technical Implementation Guide

Version

V1R5

CCIs

CCI-000366

Discussion

Distinct user account databases on each separate system cause problems with username and password policy enforcement. Most approved directory services infrastructure solutions allow centralized management of users and passwords.

Check Content

If the macOS system is using a mandatory Smart Card Policy, this requirement is not applicable.

Verify the macOS system is configured to integrate into a directory service with the following command:

/usr/bin/dscl localhost -list . | /usr/bin/grep "Active Directory"

If no results are returned, this is a finding.

Fix Text

Configure the macOS system to integrate into an existing directory services infrastructure.