Detections
Analytics

1.192 WN11-SO-000020

Information

The built-in administrator account must be renamed.

GROUP ID: V-253435
RULE ID: SV-253435r991589

The built-in administrator account is a well-known account subject to attack. Renaming this account to an unidentified name improves the protection of this account and the system.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Accounts: Rename administrator account'

to a name other than 'Administrator'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-253435r991589_rule, STIG-ID|WN11-SO-000020, Vuln-ID|V-253435

Plugin: Windows

Control ID: b531cc68f4b084e5a334aa774af4562fd494e05da27bdba7cd21cdc2a2cb9e62