Detections
Analytics
WN25-SO-000380 - Windows Server 2025 User Account Control (UAC) approval mode for the built-in Administrator must be enabled.
Information
UAC is a security mechanism for limiting the elevation of privileges, including administrative accounts, unless authorized. This setting configures the built-in Administrator account so that it runs in Admin Approval Mode.Satisfies: SRG-OS-000373-GPOS-00156, SRG-OS-000373-GPOS-00157
Solution
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> User Account Control: Admin Approval Mode for the Built-in Administrator account to 'Enabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R1_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r1
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-11, CAT|II, CCI|CCI-004895, Rule-ID|SV-278232r1182191_rule, STIG-ID|WN25-SO-000380, Vuln-ID|V-278232
Plugin: Windows
Control ID: 4d4e2c80fcc284c16c339d3d1dad157ed32b082a6105199f4013a4c4d7eecae4