Detections
Analytics

1.208 WN16-SO-000030

Information

Windows Server 2016 built-in administrator account must be renamed.

GROUP ID: V-225026
RULE ID: SV-225026r991589

The built-in administrator account is a well-known account subject to attack. Renaming this account to an unidentified name improves the protection of this account and the system.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Accounts: Rename administrator account'

to a name other than 'Administrator'.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2

Plugin: Windows

Control ID: c12a9806aacac8224dff75de225397a21d43fc525ed44baf660bece0136ffbbc