Microsoft Windows 10
The built-in administrator account must be renamed
STIG ID:
WN10-SO-000020
|
SRG:
SRG-OS-000480-GPOS-00227
|
Severity:
Medium
|
CCI:
CCI-000366
|
Vulnerability ID:
V-220911
Description
The built-in administrator account is a well-known account subject to attack. Renaming this account to an unidentified name improves the protection of this account and the system.
Check
C-22626r555218_chk
Verify the effective setting in Local Group Policy Editor.
Run "gpedit.msc".
Navigate to Local Computer Policy >> Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options.
If the value for "Accounts: Rename administrator account" is set to "Administrator", this is a finding.
Fix
F-22615r555219_fix
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> "Accounts: Rename administrator account" to a name other than "Administrator".