Detections
Analytics

1.19 WN11-00-000085

Information

Standard local user accounts must not exist on a system in a domain.

GROUP ID: V-253272
RULE ID: SV-253272r991589

To minimize potential points of attack, local user accounts, other than built-in accounts and local administrator accounts, must not exist on a workstation in a domain. Users must log on to workstations in a domain with their domain accounts.

Solution

Limit local user accounts on domain-joined systems. Remove any unauthorized local accounts.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-253272r991589_rule, STIG-ID|WN11-00-000085, Vuln-ID|V-253272

Plugin: Windows

Control ID: cac344936c478ff9293721c5157d2cf35ee4dcb2f8f1dc5f3f789e14d0f7e0d8