Title

The system does not have a backup administrator account (Cat II impact)

Discussion

The built-in administrator account, as a well known account subject to attack, is disabled by default and per STIG requirements. Domain Admins on domain joined systems should provide sufficient availability for administering a system. A site with limited administrators must ensure they have a contingency for administering a non-domain system.

Check Content

Determine if there is a contingency for administering a non-domain system with limited administrators. If a backup administrator account exists it must be documented with the IAO and it must be stored with its password in a secure location.

Fix Text

Create a contingency plan for administering a system in emergency situations.

Additional Identifiers

Rule ID: SV-29745r2_rule

Vulnerability ID: V-14224

Group Title: Backup Administrator Account

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.