Detections
Analytics

WN11-00-000085 - Standard local user accounts must not exist on a system in a domain.

Information

To minimize potential points of attack, local user accounts, other than built-in accounts and local administrator accounts, must not exist on a workstation in a domain. Users must log on to workstations in a domain with their domain accounts.

Solution

Limit local user accounts on domain-joined systems. Remove any unauthorized local accounts.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R8_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-253272r1210286_rule, STIG-ID|WN11-00-000085, Vuln-ID|V-253272

Plugin: Windows

Control ID: 8fdfaf50ae6ccc741e1d158e6c74cc08fcae5c6f5a8752a41c063965877e6e1c