CSCv7|16.8

Title

Disable Any Unassociated Accounts

Description

Disable any account that cannot be associated with a business process or business owner.

Reference Item Details

Category: Account Monitoring and Control

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.3 Ensure Access Review is Set Up for External Users in Azure AD Privileged Identity Managementmicrosoft_azureCIS Microsoft Azure Foundations v1.5.0 L2
1.4 Ensure Guest Users Are Reviewed on a Regular Basismicrosoft_azureCIS Microsoft Azure Foundations v1.5.0 L1
2.2.16 (L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1
2.2.16 (L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1 Bitlocker
2.2.17 (L1) Ensure 'Deny log on as a batch job' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1 Bitlocker
2.2.17 (L1) Ensure 'Deny log on as a batch job' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1
2.2.18 (L1) Ensure 'Deny log on as a service' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1
2.2.18 (L1) Ensure 'Deny log on as a service' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1 Bitlocker
2.2.19 (L1) Ensure 'Deny log on locally' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1
2.2.19 (L1) Ensure 'Deny log on locally' to include 'Guests'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1 Bitlocker
2.2.19 Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.0
2.2.20 (L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1 Bitlocker
2.2.20 (L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1
2.2.20 Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0
2.2.20 Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0
2.2.21 Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0
2.2.21 Ensure 'Deny log on as a batch job' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.0
2.2.21 Ensure 'Deny log on as a batch job' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0
2.2.22 Ensure 'Deny log on as a batch job' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0
2.2.22 Ensure 'Deny log on as a batch job' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0
2.2.22 Ensure 'Deny log on as a service' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.0
2.2.22 Ensure 'Deny log on as a service' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0
2.2.23 Ensure 'Deny log on as a service' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0
2.2.23 Ensure 'Deny log on as a service' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0
2.2.23 Ensure 'Deny log on locally' to include 'Guests'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG DC L1 v1.0.1
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG MS L1 v1.1.0
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG DC L1 v1.1.0
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG MS L1 v1.0.1
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 DC L1 v1.3.0
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 v1.0.0 L1 DC
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v1.12.0 L1 + NG
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + NG
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL + NG
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + BL + NG
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BL
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L1
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + NG
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + BL
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 MS L1 v1.3.0
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL + NG
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L1
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BL + NG
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + NG
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2016 MS L1 v1.4.0
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2016 DC L1 v1.4.0