Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Standard local user accounts must not exist on a system in a domain.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-63367 | WN10-00-000085 | SV-77857r1_rule | Low |
| Description |
|---|
| To minimize potential points of attack, local user accounts, other than built-in accounts and local administrator accounts, must not exist on a workstation in a domain. Users must log onto workstations in a domain with their domain accounts. |
| STIG | Date |
|---|---|
| Windows 10 Security Technical Implementation Guide | 2017-02-21 |
Details
| Check Text ( C-64107r1_chk ) |
|---|
| Run "Computer Management". Navigate to System Tools >> Local Users and Groups >> Users. If local users other than the accounts listed below exist on a workstation in a domain, this is a finding. Built-in Administrator account (Disabled) Built-in Guest account (Disabled) Built-in Default Account (Disabled) Local administrator account(s) |
| Fix Text (F-69287r1_fix) |
|---|
| Limit local user accounts on domain-joined systems. Remove any unauthorized local accounts. |