Method for checking AD domain security baseline of DC server

The method for checking the security baseline of the AD domain of the DC server comprises the steps that a rule base which can be recognized by a program of the AD domain is obtained, and the rule base is related to the security baseline of the AD domain; obtaining working information of a server in the AD domain; comparing the work information with the rule base to obtain a risk item; and generating a risk report according to the risk item. According to the method and the device, security check is carried out on the AD domain of the DC server, the security of the AD domain of the DC server can be improved, weak points and emphasis points of security conditions in the AD domain can be directly mastered according to the risk items, and timely adjustment is carried out on the weak points and the emphasis points. 一种DC服务器的AD域安全基线检查的方法，包括：获取AD域的程序可识别的规则库，所述规则库与AD域的安全基线相关；获取AD域内的服务器的工作信息；将所述工作信息和所述规则库进行比对，以获取风险项；根据所述风险项生成风险报告。本申请针对DC服务器的AD域进行安全检查，能够提高针对DC服务器的AD域的安全性，并且根据风险项能够直接掌握AD域内安全情况的薄弱点和侧重点，针对这些薄弱点和侧重点进行及时调整。