Local users must not exist on a system in a domain.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1148 | 4.024 | SV-29512r2_rule | IAAC-1 | Low |
| Description |
|---|
| To minimize potential points of attack, local users, other than built-in accounts such as Administrator and Guest accounts, must not exist on a workstation in a domain. Users must log onto workstations in a domain with their domain accounts. |
| STIG | Date |
|---|---|
| Windows Vista Security Technical Implementation Guide | 2014-07-09 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-53561r2_fix) |
|---|
| Configure domain-joined systems to restrict the existence of local user accounts. Remove any unauthorized local accounts. |