UCF STIG Viewer Logo

The system does not have a backup administrator account


Overview

Finding ID Version Rule ID IA Controls Severity
V-14224 3.121 SV-29745r2_rule Medium
Description
The built-in administrator account, as a well known account subject to attack, is disabled by default and per STIG requirements. Domain Admins on domain joined systems should provide sufficient availability for administering a system. A site with limited administrators must ensure they have a contingency for administering a non-domain system.
STIG Date
Windows Vista Security Technical Implementation Guide 2017-01-30

Details

Check Text ( C-41761r1_chk )
Determine if there is a contingency for administering a non-domain system with limited administrators. If a backup administrator account exists it must be documented with the IAO and it must be stored with its password in a secure location.
Fix Text (F-37540r1_fix)
Create a contingency plan for administering a system in emergency situations.