Standard local user accounts must not exist on a system in a domain.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-63367	WN10-00-000085	SV-77857r1_rule		Low

Description
To minimize potential points of attack, local user accounts, other than built-in accounts and local administrator accounts, must not exist on a workstation in a domain. Users must log onto workstations in a domain with their domain accounts.

STIG	Date
Windows 10 Security Technical Implementation Guide	2018-04-06

Details

Check Text ( C-64107r1_chk )
Run "Computer Management". Navigate to System Tools >> Local Users and Groups >> Users. If local users other than the accounts listed below exist on a workstation in a domain, this is a finding. Built-in Administrator account (Disabled) Built-in Guest account (Disabled) Built-in Default Account (Disabled) Local administrator account(s)

Fix Text (F-69287r1_fix)
Limit local user accounts on domain-joined systems. Remove any unauthorized local accounts.