Vulnerability Discussion

A directory service infrastructure enables centralized user and rights
management, as well as centralized control over computer and user configurations. Integrating the macOS
systems used throughout an organization into a directory services infrastructure ensures more
administrator oversight and security than allowing distinct user account databases to exist on each
separate system.

Check

Verify the macOS system is configured to integrate into a directory service with the
following command:

/usr/bin/dscl localhost -list . \| /usr/bin/grep -qvE '(Contact\|Search\|Local\|^$)'; /bin/echo $?

If the result is not "0", this is a finding.

Fix

Configure the macOS system to integrate into an existing directory
services infrastructure.