The application must provide a mechanism to automatically terminate accounts designated as temporary or emergency accounts after an organization defined time period.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36373	SRG-APP-024-NA	SV-47777r1_rule		Medium

Description
Temporary application accounts could ostensibly be used in the event of a vendor support visit where a support representative requires a temporary unique account in order to perform diagnostic testing or conduct some other support related activity. When these types of accounts are created, there is a risk that the temporary account may remain in place and active after the support representative has left. Rationale for non-applicability: There are no temporary administrator accounts on an MDM server. This feature is handled by the operating system.

Description

Temporary application accounts could ostensibly be used in the event of a vendor support visit where a support representative requires a temporary unique account in order to perform diagnostic testing or conduct some other support related activity. When these types of accounts are created, there is a risk that the temporary account may remain in place and active after the support representative has left. Rationale for non-applicability: There are no temporary administrator accounts on an MDM server. This feature is handled by the operating system.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44615r1_chk )
This requirement is NA for the MDM SRG.

Fix Text (F-40905r1_fix)
The requirement is NA. No fix is required.