The default Builtin\Administrators group must be removed from the SCOM Administrators Role Group.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-237437
SCOM-IA-000003
SV-237437r643957_rule
Medium
Description
SCOM servers with default well-known operating system groups defined the SCOM Administrators Global Group may allow a local administrator access to privileged SCOM access.