2.3.1.4 Configure 'Accounts: Rename administrator account'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The built-in local administrator account is a well-known account name that attackers will target. It is recommended to choose another name for this account, and to avoid names that denote administrative or elevated access accounts.

Solution

Make sure 'Rename administrator account' is not set to Administrator or Admin (non standard).

See Also

https://workbench.cisecurity.org/files/1941