Title

The built-in administrator account will be renamed. (Cat II impact)

Discussion

The built-in administrator account is a well-known account. Renaming the account to an unidentified name improves the protection of this account and the system.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Accounts: Rename administrator account” to a value other than “Administrator”.

Additional Identifiers

Rule ID: SV-32293r1_rule

Vulnerability ID: V-1115

Group Title: Rename Built-in Administrator Account

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.