3.121 - The system does not have a backup administrator account

Information

The built-in administrator account, as a well known account subject to attack, is disabled by default and per STIG requirements. Domain Admins on domain joined systems should provide sufficient availability for administering a system. A site with limited administrators must ensure they have a contingency for administering a non-domain system.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Create a contingency plan for administering a system in emergency situations.

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip