Skip to content
MitoMito Docs

AD-DCOMP-05: Computer operating system details should be investigated
ID AD-DCOMP-05
Severity Info
Suite Active Directory (on-premises)
Product Active Directory
Feature Computers
Security area Devices and endpoints
Resource type Computer
Framework controls nist-800-53-r5:CM-8 System Component Inventory
Reads from On-premises Active Directory

What this checks and how to fix it

Section titled “What this checks and how to fix it”
  • Detailed knowledge of operating system versions and service pack levels is essential for effective vulnerability management and security compliance. This information helps identify:

Security Risks:

  • Missing Service Packs: Systems without critical updates
  • End-of-Life Versions: Operating systems no longer receiving security patches
  • Version Fragmentation: Inconsistent patch levels across the environment
  • Unsupported Configurations: OS versions that violate security policies

Compliance Requirements:

  • Many frameworks require specific OS versions
  • Service pack levels may be mandated
  • Documentation of OS landscape is often required

Control Type

Section titled “Control Type”

Operational

Security Recommendation

Section titled “Security Recommendation”

  1. Maintain Current Service Packs:

    • Apply latest service packs and cumulative updates
    • Test before deployment to production
    • Maintain rollback procedures

  2. Upgrade End-of-Life Systems:

    • Prioritize systems running unsupported OS versions
    • Develop migration plans for legacy applications
    • Consider virtualization for legacy requirements

  3. Standardize Configurations:

    • Use standard OS images for new deployments
    • Implement configuration management
    • Regular compliance scanning

How the Test Works

Section titled “How the Test Works”

This test provides detailed analysis including:

  • Operating system names and versions
  • Service pack levels
  • Distribution counts and percentages
  • Identification of systems without OS information
Section titled “Related Tests”
  • Test-MtAdComputerOperatingSystemCount - Summary OS count
  • Test-MtAdComputerStaleEnabledCount - Stale computer identification
  • Test-MtAdDcOperatingSystemDetails - Domain Controller OS details

Mito check. Author: soulemike. Open-source licences.

Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).

© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.