Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-74719 | WN10-00-000175 | SV-89393r2_rule | Medium |
Description |
---|
The Secondary Logon service provides a means for entering alternate credentials, typically used to run commands with elevated privileges. Using privileged credentials in a standard user session can expose those credentials to theft. |
STIG | Date |
---|---|
Windows 10 Security Technical Implementation Guide | 2019-09-25 |
Check Text ( C-94093r1_chk ) |
---|
Run "Services.msc". Locate the "Secondary Logon" service. If the "Startup Type" is not "Disabled" or the "Status" is "Running", this is a finding. |
Fix Text (F-81333r1_fix) |
---|
Configure the "Secondary Logon" service "Startup Type" to "Disabled". |