Detections
Analytics

WN11-00-000085 - Standard local user accounts must not exist on a system in a domain.

Information

To minimize potential points of attack, local user accounts, other than built-in accounts and local administrator accounts, must not exist on a workstation in a domain. Users must log on to workstations in a domain with their domain accounts.

Solution

Limit local user accounts on domain-joined systems. Remove any unauthorized local accounts.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R11_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-253272r1268251_rule, STIG-ID|WN11-00-000085, Vuln-ID|V-253272

Plugin: Windows

Control ID: 13e9b01ab59296e29586fd28ed8209773447585734f483aa3800c560b10161e5