WN10-00-000085 - Standard local user accounts must not exist on a system in a domain.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


To minimize potential points of attack, local user accounts, other than built-in accounts and local administrator accounts, must not exist on a workstation in a domain. Users must log onto workstations in a domain with their domain accounts.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.


Limit local user accounts on domain-joined systems. Remove any unauthorized local accounts.

See Also


Item Details

References: CAT|III, CCI|CCI-000366, Rule-ID|SV-220715r569187_rule, STIG-ID|WN10-00-000085, STIG-Legacy|SV-77857, STIG-Legacy|V-63367, Vuln-ID|V-220715

Plugin: Windows

Control ID: dad9e9c2c2f4c480db339b37ac684721e0c9a4384b8ccb70ef09e371f6b132db