1.190 WN10-SO-000020

Information

The built-in administrator account must be renamed.

GROUP ID: V-220911
RULE ID: SV-220911r991589

The built-in administrator account is a well-known account subject to attack. Renaming this account to an unidentified name improves the protection of this account and the system.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Accounts: Rename administrator account'

to a name other than 'Administrator'.

See Also

https://workbench.cisecurity.org/benchmarks/23869