Detections
Analytics

CSCv7|16.8

Title

Disable Any Unassociated Accounts

Description

Disable any account that cannot be associated with a business process or business owner.

Reference Item Details

Category: Account Monitoring and Control

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.4 Ensure Access Review is Set Up for External Users in Azure AD Privileged Identity Managementmicrosoft_azureCIS Microsoft Azure Foundations v2.0.0 L2
1.5 Ensure Guest Users Are Reviewed on a Regular Basismicrosoft_azureCIS Microsoft Azure Foundations v2.0.0 L1
1.12 Ensure API Keys Only Exist for Active ServicesGCPCIS Google Cloud Platform v2.0.0 L2
2.13 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2014 Database L1 AWS RDS v1.5.0
2.13 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2014 Database L1 DB v1.5.0
2.13 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2012 Database L1 AWS RDS v1.6.0
2.13 Ensure 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2012 Database L1 DB v1.6.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2022 Database L1 AWS RDS v1.0.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2022 Database L1 DB v1.0.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2016 Database L1 AWS RDS v1.4.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2017 Database L1 DB v1.3.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2019 Database L1 AWS RDS v1.3.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2016 Database L1 DB v1.4.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2017 Database L1 AWS RDS v1.3.0
2.13 Ensure the 'sa' Login Account is set to 'Disabled'MS_SQLDBCIS SQL Server 2019 Database L1 DB v1.3.0
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG MS L1 v1.1.0
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG DC L1 v1.0.1
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG DC L1 v1.1.0
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG MS L1 v1.0.1
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DC
18.9.46.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MS
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + NG
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + BL + NG
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 EMS Gateway v2.0.0 L1
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL + NG
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + NG
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v2.0.0 L1
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v2.0.0 L1 + BL
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + BL
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + NG
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + BL
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + BL + NG
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2022 v2.0.0 L1 MS
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL + NG
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + NG
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2019 MS Standalone L1 v1.0.0
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2019 DC L1 v2.0.0
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2016 MS L1 v2.0.0
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2019 MS L1 v2.0.0
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 11 Stand-alone v2.0.0 L1 + BL
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2016 DC L1 v2.0.0
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2022 v2.0.0 L1 DC
18.10.42.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 11 Stand-alone v2.0.0 L1