Title

Users with Administrative privilege must be documented. (Cat II impact)

Discussion

Administrative accounts may perform any action on a system. Users with administrative accounts must be documented to ensure those with this level of access are clearly identified.

Check Content

Review the necessary documentation that identifies the members of the Administrators group. If a list of all users belonging to the Administrators group is not maintained with the ISSO, this is a finding.

Fix Text

Create the necessary documentation that identifies the members of the Administrators group.

Additional Identifiers

Rule ID: SV-48275r3_rule

Vulnerability ID: V-36658

Group Title: WIN00-000005-01

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.