Detections
Analytics

CSCv7|16.8

Title

Disable Any Unassociated Accounts

Description

Disable any account that cannot be associated with a business process or business owner.

Reference Item Details

Category: Account Monitoring and Control

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.12 Ensure API Keys Only Exist for Active ServicesGCPCIS Google Cloud Platform v3.0.0 L2
2.2.16 (L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
2.2.16 Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1
2.2.17 (L1) Ensure 'Deny log on as a batch job' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
2.2.17 Ensure 'Deny log on as a batch job' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1
2.2.18 (L1) Ensure 'Deny log on as a service' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
2.2.18 Ensure 'Deny log on as a service' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1
2.13 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2012 Database L1 AWS RDS v1.6.0
2.13 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2012 Database L1 DB v1.6.0
2.13 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2014 Database L1 DB v1.5.0
2.13 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2014 Database L1 AWS RDS v1.5.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2016 Database L1 DB v1.4.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS Microsoft SQL Server 2019 v1.4.0 L1 Database Engine
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2022 Database L1 DB v1.1.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS Microsoft SQL Server 2019 v1.4.0 L1 AWS RDS
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2017 Database L1 AWS RDS v1.3.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2017 Database L1 DB v1.3.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2022 Database L1 AWS RDS v1.1.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2016 Database L1 AWS RDS v1.4.0
2.14 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2008 R2 DB Engine L1 v1.7.0
18.9.46.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MS
18.9.46.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 DC
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MS
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DC
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 NG
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 EMS Gateway v3.0.0 L1
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1 + NG
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 v3.0.0 L1 Domain Controller
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v3.0.0 L1 + BL
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 v3.0.0 L1 Member Server
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 MS
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 Stand-alone v2.0.0 L1 MS
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v3.0.0 L1
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v3.0.0 L1
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v3.0.0 L1 + BL
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 MS
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL NG
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1 + BL + NG
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1 + BL
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 DC
18.10.41.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 DC
18.10.41.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 MS
18.10.41.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 Domain Controller
18.10.42.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 L1 DC
18.10.42.1 (L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 L1 MS
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 L1 DC
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 L1 MS