Title

The site must have a contingency for emergency administration of the system. (Cat II impact)

Discussion

The built-in administrator account, as a well known account subject to attack, is disabled by default and per STIG requirements. Domain administrative accounts on domain-joined systems should provide sufficient availability for administering a system. A site with limited administrators must ensure they have a contingency for administering a non-domain system.

Check Content

Determine if there is a contingency for administering a non-domain system with limited administrators. An emergency administrator account must be documented with the ISSO, and it must be stored with its password in a secure location. If there is no contingency for administering a system in an emergency, this is a finding.

Fix Text

Create a contingency plan for administering a system. Document any emergency administrator account with the ISSO and store the account information in a secure location.

Additional Identifiers

Rule ID: SV-48165r2_rule

Vulnerability ID: V-14224

Group Title: Backup Administrator Account

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.