UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

A group must be defined on domain systems to include all local administrator accounts.


Overview

Finding ID Version Rule ID IA Controls Severity
V-45589 WINGE-000200 SV-58415r2_rule ECLP-1 Low
Description
Several user rights on domain systems require that local administrator accounts be assigned to them. This is separate from the built-in Administrators group, which also contains domain administrative accounts/groups. Defining a consistent group name allows compliance to be more easily determined.
STIG Date
Windows Vista Security Technical Implementation Guide 2015-06-25

Details

Check Text ( None )
None
Fix Text (F-62391r1_fix)
This requirement is NA for non domain-joined systems.

Create a local group with the name "DenyNetworkAccess" or "DeniedNetworkAccess" on the system.
Include all local administrator accounts as members of the group, including the built-in Administrator account. Do not include domain administrative accounts or groups.