Detections
Analytics

1.210 WN19-SO-000030

Information

Windows Server 2019 built-in administrator account must be renamed.

GROUP ID:V-205909
RULE ID:SV-205909r991589

The built-in administrator account is a well-known account subject to attack. Renaming this account to an unidentified name improves the protection of this account and the system.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Accounts: Rename administrator account' to a name other than 'Administrator'.

See Also

https://workbench.cisecurity.org/benchmarks/22176

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2

Plugin: Windows

Control ID: 3c866b74f0bdb3bf7bacdb0b0ae29c8cf34169ccbbae4d0cc4e409a1ba9a0b5a