Detections
Analytics
WN11-00-000065 - Unused accounts must be disabled or removed from the system after 35 days of inactivity.
Information
Outdated or unused accounts provide penetration points that may go undetected. Inactive accounts must be disabled until needed (if still required), or deleted if no longer necessary.Satisfies: SRG-OS-000118-GPOS-00060
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Review local accounts and verify their necessity. Disable or delete any active accounts that have not been used in the last 35 days.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R11_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows 11 STIG v2r11
Category: ACCESS CONTROL
References: 800-53|AC-2(3), CAT|III, CCI|CCI-000017, Rule-ID|SV-288812r1260011_rule, STIG-ID|WN11-00-000065, Vuln-ID|V-288812
Plugin: Windows
Control ID: 407978fdc7eb1d16f49761bc6fddb6f09b00c3b5ffd46ebac951c28af6576426