UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Local users must not exist on a system in a domain.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1148 WN08-GE-000013 SV-48045r1_rule IAAC-1 Low
Description
To minimize potential points of attack, local users, other than built-in accounts such as Administrator and Guest accounts, must not exist on a workstation in a domain. Users must log onto workstations in a domain with their domain accounts.
STIG Date
Windows 8 Security Technical Implementation Guide 2014-01-07

Details

Check Text ( C-44784r1_chk )
Run the DUMPSEC utility.
Select "Dump Users as Table" from the "Report" menu.
Select the following fields, and click "Add" for each entry:

UserName
SID
AcctDisabled
Groups

If local users other than the built-in accounts listed below exist on a workstation in a domain, this is a finding:

Built-in administrator account (SID ending in 500)
Built-in guest account (SID ending in 501)

If a site has need of special purpose local user accounts, this must be documented with the IAO.
Fix Text (F-41183r1_fix)
Configure domain joined systems to restrict the existence of local user accounts. Remove any unauthorized local accounts.