Security Technical Implementation Guides (STIGs)

Vulnerability ID	Severity	Description
V-253432	Medium	The built-in administrator account must be disabled.
V-220908	Medium	The built-in administrator account must be disabled
V-254257	Medium	Windows Server 2022 accounts must require passwords
V-205700	Medium	Windows Server 2019 accounts must require passwords
V-224825	Medium	Shared user accounts must not be permitted on the system
V-224838	Medium	Windows Server 2016 accounts must require passwords
V-254244	Medium	Windows Server 2022 shared user accounts must not be permitted
V-205699	Medium	Windows Server 2019 shared user accounts must not be permitted
V-268558	Medium	The macOS system must configure the login window to prompt for username and password
V-277991	Medium	Windows Server 2025 shared user accounts must not be permitted
V-278004	Medium	Windows Server 2025 accounts must require passwords
V-243484	Medium	Security identifiers (SIDs) must be configured to use only authentication data of directly truste...
V-277050	Medium	The macOS system must disable login to other users' active and locked sessions
V-277051	Medium	The macOS system must disable root login
V-277121	High	The macOS system must disable unattended or automatic login to the system
V-277168	Medium	The macOS system must configure the login window to prompt for username and password