Detections
Analytics
WN11-SO-000245 - User Account Control approval mode for the built-in Administrator must be enabled.
Information
User Account Control (UAC) is a security mechanism for limiting the elevation of privileges, including administrative accounts, unless authorized. This setting configures the built-in Administrator account so that it runs in Admin Approval Mode.Solution
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'User Account Control: Admin Approval Mode for the Built-in Administrator account' to 'Enabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R7_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows 11 STIG v2r7
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-11, CAT|II, CCI|CCI-002038, Rule-ID|SV-253468r1051057_rule, STIG-ID|WN11-SO-000245, Vuln-ID|V-253468
Plugin: Windows
Control ID: c0e755fe1c694d0b15cab4c1141340a82188f9bd15b00315e31af9fdde3f1d74