Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-74719 | WN10-00-000175 | SV-89393r1_rule | Medium |
Description |
---|
The Secondary Logon service provides a means for entering alternate credentials, typically used to run commands with elevated privileges. Using privileged credentials in a standard user session can expose those credentials to theft. |
STIG | Date |
---|---|
Windows 10 Security Technical Implementation Guide | 2018-06-07 |
Check Text ( C-74573r1_chk ) |
---|
Run "Services.msc". Locate the "Secondary Logon" service. If the "Startup Type" is not "Disabled", this is a finding. |
Fix Text (F-81333r1_fix) |
---|
Configure the "Secondary Logon" service "Startup Type" to "Disabled". |