Detections
Analytics

1.19 WN10-00-000085

Information

Standard local user accounts must not exist on a system in a domain.

GROUP ID: V-220715RULE ID: SV-220715r991589

To minimize potential points of attack, local user accounts, other than built-in accounts and local administrator accounts, must not exist on a workstation in a domain. Users must log on to workstations in a domain with their domain accounts.

Solution

Limit local user accounts on domain-joined systems. Remove any unauthorized local accounts.

See Also

https://workbench.cisecurity.org/benchmarks/23869

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-220715r991589_rule, STIG-ID|WN10-00-000085, Vuln-ID|V-220715

Plugin: Windows

Control ID: a9478dd0c0c430093e8632e64e587aca1cfc7ac9390d4ebe6a711252392d5d49