VCWN-06-000030 - The vCenter Administrator role must be secured and assigned to specific users other than a Windows Administrator.


By default, vCenter Server grants full administrative rights to the local administrator's account, which can be accessed by domain administrators. Separation of duties dictates that full vCenter Administrative rights should be granted only to those administrators who are required to have it. This privilege should not be granted to any group whose membership is not strictly controlled. Therefore, administrative rights should be removed from the local Windows server to users who are not vCenter administrators.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


Under the computer management console for windows view the local administrators group and remove any users or groups that are not vCenter administrators.

See Also

Item Details


References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-63999, Rule-ID|SV-78489r1_rule, STIG-ID|VCWN-06-000030, Vuln-ID|V-63999

Plugin: VMware

Control ID: 9772f7ad78b4e4e2e9ad05c30eb876df47a8957ec622c230d1ebc9c552f14bd9