Detections
Analytics

1.1 WN16-00-000010

Information

Users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks.

GROUP ID:V-224819
RULE ID:SV-224819r991589

Using a privileged account to perform routine functions makes the computer vulnerable to malicious software inadvertently introduced during a session that has been granted full privileges.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Ensure each user with administrative privileges has a separate account for user duties and one for privileged duties.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-224819r991589_rule, STIG-ID|WN16-00-000010

Plugin: Windows

Control ID: 846263cfac11a1f98c10804ac38119dbfacf2dd0febdeb6669854ac5df11975c