A group named DenyNetworkAccess must be defined on domain systems to include all local administrator accounts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-45589	WINGE-000200	SV-58415r1_rule	ECLP-1	Low

Description
Several user rights on domain systems require that local administrator accounts be assigned to them. Defining a consistent group name allows compliance to be more easily determined.

STIG	Date
Windows Vista Security Technical Implementation Guide	2014-07-09

Details

Check Text ( None )
None

Fix Text (F-49937r2_fix)
This requirement is NA for non domain-joined systems. Create a local group with the name "DenyNetworkAccess" if one does not exist on the system. Include all local administrator accounts as members of the group, including the built-in Administrator account.