Rule ID
SV-286740r1291655_rule
Version
V1R1
CCIs
Error logs can contain sensitive information about system errors and system architecture that need to be protected from unauthorized access and modification. By default, Horizon Connection Server logs are only accessible to local Windows administrators. This configuration must be verified and maintained.
1. On the Horizon Connection Server, navigate to: %PROGRAMDATA%\Omnissa\Horizon 2. Right-click the "logs" folder and select "Properties". 3. Click the "Security" tab. 4. By default, only built-in system accounts such as "SYSTEM" and "NETWORK SERVICE" and the local "Administrators" group have access to the "logs" folder. If any other groups or users have any permissions on this folder, this is a finding.
1. On the Horizon Connection Server, navigate to: %PROGRAMDATA%\Omnissa\Horizon. 2. Right-click the "logs" folder and select "Properties". 3. Click the "Security" tab. 4. Click "Edit". 5. Highlight any groups or users that are not built-in system administrative accounts or the local "Administrators" group. 6. Click "Remove". 7. Click "OK". 8. Click "OK".