V-243482
Active Directory Domain Security Technical Implementation Guide
Title
Interconnections between DoD directory services of different classification levels must use a cross-domain solution that is approved for use with inter-classification trusts.
Description
<VulnDiscussion>If a robust cross-domain solution is not used, then it could permit unauthorized access to classified data. To support secure access between resources of different classification levels, the solution must meet discretionary access control requirements. There are currently, no DOD- approved solutions. Further Policy Details: Do not define trust relationships between domains, forests, or realms with resources at different classification levels. The configuration of a trust relati...
Fix Text (Documentation Requirement)
Delete the trust relationship that is defined between entities with resources at different DoD classification levels.