Disabled Accounts in Privileged Groups

low

Description

Having a sane account management process requires monitoring membership in privileged groups.

Solution

When an administrator leaves, remove their account from privileged groups to avoid accidental reactivation and simplify user management.

See Also

Understanding User Accounts

Indicator Details

Name: Disabled Accounts in Privileged Groups

Codename: C-DISABLED-ACCOUNTS-PRIV-GROUPS

Severity: Low